diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..bd48cc9 --- /dev/null +++ b/.snyk @@ -0,0 +1,112 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@rollup-umd/documentation > @babel/core > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > webpack-merge > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > react-styleguidist > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > @babel/core > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/core > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > styled-components > @babel/traverse > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > metro-react-native-babel-preset > @babel/plugin-transform-block-scoping > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > html-webpack-plugin > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > webpack-manifest-plugin > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > yup > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > react-styleguidist > webpack-merge > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > styled-components > babel-plugin-styled-components > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > @expo/config > @expo/json-file > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > styled-components > @babel/traverse > @babel/generator > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > metro-react-native-babel-preset > @babel/plugin-transform-classes > @babel/helper-define-map > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > react-styleguidist > react-docgen > async > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/json-file > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > optimize-css-assets-webpack-plugin > last-call-webpack-plugin > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > react-dev-utils > inquirer > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > react-styleguidist > react-dev-utils > inquirer > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > react-styleguidist > webpack-dev-server > http-proxy-middleware > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > @babel/core > @babel/helpers > @babel/traverse > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/preset-env > @babel/plugin-transform-classes > @babel/helper-define-map > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > styled-components > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > metro-react-native-babel-preset > @babel/plugin-transform-unicode-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/config > @expo/json-file > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @bootstrap-styled/rsg-components > @bootstrap-styled/v4 > @rollup-umd/documentation-cli > async > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > react-styleguidist > webpack-dev-server > portfinder > async > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/preset-env > @babel/plugin-transform-unicode-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > styled-components > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/babel-preset-cli > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @bootstrap-styled/rsg-components > @bootstrap-styled/navigation-bar > @bootstrap-styled/v4 > @rollup-umd/documentation-cli > async > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/generator > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/preset-env > @babel/preset-modules > @babel/plugin-transform-dotall-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/babel-preset-cli > @babel/preset-env > @babel/plugin-transform-classes > @babel/helper-define-map > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/babel-preset-cli > @babel/preset-env > @babel/plugin-transform-unicode-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/babel-preset-cli > @babel/preset-env > @babel/preset-modules > @babel/plugin-transform-dotall-regex > @babel/helper-create-regexp-features-plugin > @babel/helper-regex > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/babel-preset-cli > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > documentation > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/babel-preset-cli > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' + - '@rollup-umd/documentation > @expo/webpack-config > expo-pwa > @expo/babel-preset-cli > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-04-30T22:19:39.282Z' diff --git a/package.json b/package.json index 9361c16..0499149 100644 --- a/package.json +++ b/package.json @@ -25,13 +25,14 @@ "test:clean": "rimraf ./coverage", "test:watch": "npm run test -- --watch", "lint": "eslint src", - "prepublish": "npm run build", + "prepublish": "npm run snyk-protect && npm run build", "lint-staged": "lint-staged", "jsdoc-documentation": "jsdoc-documentation", "jsdoc": "jsdoc-documentation --file", "prestyleguide": "npm run jsdoc", "styleguide": "styleguidist server", - "styleguide:build": "styleguidist build" + "styleguide:build": "styleguidist build", + "snyk-protect": "snyk protect" }, "repository": { "type": "git", @@ -215,7 +216,8 @@ "@rollup-umd/documentation": "^2.0.4", "bootstrap-styled": "^2.4.13", "prop-types": "^15.7.2", - "react": "^16.8.6" + "react": "^16.8.6", + "snyk": "^1.316.1" }, "peerDependencies": {}, "publishConfig": { @@ -343,5 +345,6 @@ "indent": 2 }, "declinationId": "bs", - "contributors": [] + "contributors": [], + "snyk": true }