diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..cf1b24b --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.8.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:marked:20170907': + - marked: + patched: '2017-11-01T08:19:08.136Z' diff --git a/package.json b/package.json index d9ac19a..ec55bc5 100644 --- a/package.json +++ b/package.json @@ -6,7 +6,7 @@ "dependencies": { "accepts": "^1.1.4", "after": "^0.8.1", - "body-parser": "^1.8.4", + "body-parser": "~1.9.3", "connect-redis": "^2.1.0", "cookie": "^0.1.2", "cookie-parser": "^1.3.4", @@ -16,7 +16,7 @@ "ejs": "^1.0.0", "escape-html": "^1.0.1", "etag": "^1.4.0", - "express": "^4.12.3", + "express": "~4.10.3", "express-session": "^1.8.2", "finalhandler": "^0.2.0", "fresh": "^0.2.4", @@ -28,7 +28,7 @@ "merge-descriptors": "^0.0.2", "method-override": "^2.2.0", "methods": "^1.1.0", - "morgan": "^1.3.2", + "morgan": "~1.5.0", "multiparty": "^3.3.2", "on-finished": "^2.1.1", "parseurl": "^1.3.0", @@ -45,10 +45,8 @@ "vary": "^1.0.0", "vhost": "^3.0.0", "bcrypt-nodejs": "0.0.3", - "body-parser": "~1.9.3", - "express": "~4.10.3", "jsonwebtoken": "^5.0.0", - "morgan": "~1.5.0" + "snyk": "^1.47.0" }, "devDependencies": { "mocha": "^1.21.5" @@ -58,5 +56,10 @@ "url": "https://github.com/Distelli/Example-MEAN-App.git" }, "author": "Tanner Phan", - "homepage": "https://github.com/Distelli/Example-MEAN-App" + "homepage": "https://github.com/Distelli/Example-MEAN-App", + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }