From 1214d95b5f2a0a660233001e7e61fbe106fa5bcd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 28 Apr 2023 18:46:51 +0000 Subject: [PATCH] fix: deps/npm/node_modules/function-bind/package.json & deps/npm/node_modules/function-bind/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-584908 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- deps/npm/node_modules/function-bind/.snyk | 12 ++++++++++++ deps/npm/node_modules/function-bind/package.json | 13 +++++++++---- 2 files changed, 21 insertions(+), 4 deletions(-) create mode 100644 deps/npm/node_modules/function-bind/.snyk diff --git a/deps/npm/node_modules/function-bind/.snyk b/deps/npm/node_modules/function-bind/.snyk new file mode 100644 index 00000000000000..3a54c2fa1d19bc --- /dev/null +++ b/deps/npm/node_modules/function-bind/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - jscs > lodash: + patched: '2023-04-28T18:46:48.046Z' + - jscs > xmlbuilder > lodash: + patched: '2023-04-28T18:46:48.046Z' + - jscs > jscs-jsdoc > jsdoctypeparser > lodash: + patched: '2023-04-28T18:46:48.046Z' diff --git a/deps/npm/node_modules/function-bind/package.json b/deps/npm/node_modules/function-bind/package.json index 20a1727cbf8711..caa2248ac815b2 100644 --- a/deps/npm/node_modules/function-bind/package.json +++ b/deps/npm/node_modules/function-bind/package.json @@ -25,11 +25,13 @@ "url": "https://github.com/Raynos/function-bind/issues", "email": "raynos2@gmail.com" }, - "dependencies": {}, + "dependencies": { + "@snyk/protect": "latest" + }, "devDependencies": { "@ljharb/eslint-config": "^12.2.1", "covert": "^1.1.0", - "eslint": "^4.5.0", + "eslint": "^5.0.0", "jscs": "^3.0.7", "tape": "^4.8.0" }, @@ -42,7 +44,9 @@ "coverage": "covert test/*.js", "lint": "npm run jscs && npm run eslint", "jscs": "jscs *.js */*.js", - "eslint": "eslint *.js */*.js" + "eslint": "eslint *.js */*.js", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "testling": { "files": "test/index.js", @@ -59,5 +63,6 @@ "iphone/6.0..latest", "android-browser/4.2..latest" ] - } + }, + "snyk": true }