diff --git a/client/.snyk b/client/.snyk new file mode 100644 index 0000000..24141e2 --- /dev/null +++ b/client/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-AXIOS-174505: + - axios: + patched: '2019-05-06T08:17:31.760Z' diff --git a/client/package.json b/client/package.json index 249dd0c..c602692 100644 --- a/client/package.json +++ b/client/package.json @@ -11,7 +11,9 @@ "e2e": "node test/e2e/runner.js", "test": "npm run unit && npm run e2e", "lint": "eslint --ext .js,.vue src test/unit test/e2e/specs", - "build": "node build/build.js" + "build": "node build/build.js", + "snyk-protect": "snyk protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "axios": "^0.18.0", @@ -23,7 +25,8 @@ "vue": "^2.5.17", "vue-material": "^1.0.0", "vue-router": "^3.0.1", - "vuetify": "^1.0.17" + "vuetify": "^1.0.17", + "snyk": "^1.161.1" }, "devDependencies": { "autoprefixer": "^7.1.2", @@ -102,5 +105,6 @@ "> 1%", "last 2 versions", "not ie <= 8" - ] + ], + "snyk": true }