From e9165f0f801586798ed0137c19229f9241bb916d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 11 Sep 2024 03:26:36 +0000 Subject: [PATCH] fix: examples/ionic2/package.json & examples/ionic2/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-HAWK-6969142 - https://snyk.io/vuln/npm:base64url:20180511 - https://snyk.io/vuln/SNYK-JS-REQUEST-3361831 - https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873 - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-HAWK-2808852 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- examples/ionic2/.snyk | 54 ++++++++++++++++++++++++++++++++++++ examples/ionic2/package.json | 16 +++++++---- 2 files changed, 64 insertions(+), 6 deletions(-) create mode 100644 examples/ionic2/.snyk diff --git a/examples/ionic2/.snyk b/examples/ionic2/.snyk new file mode 100644 index 00000000000..973bad7337c --- /dev/null +++ b/examples/ionic2/.snyk @@ -0,0 +1,54 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > hawk > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > hawk > hoek + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > hawk > boom > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > hawk > boom > hoek + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > hawk > sntp > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > hawk > sntp > hoek + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > request > hawk > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > request > hawk > hoek + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > hawk > cryptiles > boom > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > hawk > cryptiles > boom > hoek + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > request > hawk > boom > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > request > hawk > boom > hoek + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > request > hawk > sntp > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > request > hawk > sntp > hoek + - pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > node-pre-gyp > request > hawk > cryptiles > boom > hoek: + patched: '2024-09-11T03:26:32.159Z' + id: 'npm:hoek:20180212' + path: >- + pouchdb-server > pouchdb-adapter-node-websql > websql > sqlite3 > + node-pre-gyp > request > hawk > cryptiles > boom > hoek diff --git a/examples/ionic2/package.json b/examples/ionic2/package.json index b71f4e06bb8..905a80939a7 100644 --- a/examples/ionic2/package.json +++ b/examples/ionic2/package.json @@ -11,7 +11,9 @@ "lint": "ionic-app-scripts lint", "ionic:build": "ionic-app-scripts build", "ionic:serve": "ionic-app-scripts serve", - "server": "pouchdb-server --host 0.0.0.0 -p 10101 -m -d /tmp/pouchdb-server/ -n true" + "server": "pouchdb-server --host 0.0.0.0 -p 10101 -m -d /tmp/pouchdb-server/ -n true", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "@angular/common": "^4.3.0", @@ -29,17 +31,18 @@ "crypto-js": "^3.1.9-1", "ionic-angular": "^3.5.3", "ionicons": "3.0.0", - "pouchdb-adapter-http": "^6.2.0", + "pouchdb-adapter-http": "^7.0.0", "pouchdb-adapter-idb": "^6.2.0", "pouchdb-adapter-localstorage": "^6.2.0", "pouchdb-adapter-websql": "^6.2.0", "pouchdb-replication": "^6.2.0", - "pouchdb-server": "^2.3.6", + "pouchdb-server": "^4.2.0", "random-token": "0.0.8", - "rxdb": "^5.1.0", + "rxdb": "^7.3.2", "rxjs": "^5.4.2", "sw-toolbox": "3.6.0", - "zone.js": "^0.8.13" + "zone.js": "^0.8.13", + "@snyk/protect": "latest" }, "devDependencies": { "@ionic/app-scripts": "^2.0.2", @@ -48,5 +51,6 @@ "concurrently": "^3.4.0", "typescript": "^2.4.1" }, - "description": "An Ionic project" + "description": "An Ionic project", + "snyk": true }