diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..ad4b3b4 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - grunt-browser-sync > browser-sync > localtunnel > axios: + patched: '2019-05-10T08:02:38.596Z' diff --git a/package.json b/package.json index 201acbe..17be261 100644 --- a/package.json +++ b/package.json @@ -12,7 +12,8 @@ "minimist": "^1.2.0", "patternlab-node": "^2.0.0", "styleguidekit-assets-default": "^3.0.0", - "styleguidekit-mustache-default": "^3.0.0" + "styleguidekit-mustache-default": "^3.0.0", + "snyk": "^1.163.1" }, "keywords": [ "Pattern Lab", @@ -28,10 +29,13 @@ "bugs": "https://github.com/pattern-lab/edition-node-grunt/issues", "author": "Brian Muenzenmeyer", "scripts": { - "postinstall": "node node_modules/patternlab-node/core/scripts/postinstall.js" + "postinstall": "node node_modules/patternlab-node/core/scripts/postinstall.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "license": "MIT", "engines": { "node": ">=5.0" - } + }, + "snyk": true }