fix: package.json, package-lock.json & .snyk to reduce vulnerabilities (

DeviaVir#2018) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:request:20160119 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 Co-authored-by: Chase <[email protected]>
YarnSeemannsgarn · Apr 15, 2020 · d3e0f9f · d3e0f9f
1 parent 5729741
commit d3e0f9f
Show file tree

Hide file tree

Showing 3 changed files with 1,817 additions and 98 deletions.
diff --git a/.snyk b/.snyk
@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-450202:
+    - adamant-api > bitcore-mnemonic > bitcore-lib > lodash:
+        patched: '2020-03-25T09:47:35.751Z'