diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..c1c3204 --- /dev/null +++ b/.snyk @@ -0,0 +1,38 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - react-scripts > @babel/core > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > eslint > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > eslint-plugin-flowtype > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > eslint-plugin-import > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > html-webpack-plugin > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > webpack-manifest-plugin > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > @babel/core > @babel/traverse > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > eslint > inquirer > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > eslint > table > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > optimize-css-assets-webpack-plugin > last-call-webpack-plugin > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > react-dev-utils > inquirer > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > webpack-dev-server > http-proxy-middleware > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > @svgr/webpack > @svgr/plugin-jsx > @babel/core > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > babel-preset-react-app > @babel/plugin-transform-classes > @babel/helper-define-map > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > @svgr/webpack > @babel/preset-env > @babel/plugin-transform-modules-amd > @babel/helper-module-transforms > lodash: + patched: '2022-10-07T22:47:39.003Z' + - react-scripts > jest-environment-jsdom-fourteen > jsdom > request-promise-native > request-promise-core > lodash: + patched: '2022-10-07T22:47:39.003Z' diff --git a/package-lock.json b/package-lock.json index 0546596..37c6da7 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1237,6 +1237,11 @@ "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-1.1.3.tgz", "integrity": "sha512-shAmDyaQC4H92APFoIaVDHCx5bStIocgvbwQyxPRrbUY20V1EYTbSDchWbuwlMG3V17cprZhA6+78JfB+3DTPw==" }, + "@snyk/protect": { + "version": "1.1025.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1025.0.tgz", + "integrity": "sha512-RK9tY2Aqujv5l9e/5nE4yiTilk8vxyB99VtJJ/6p9TZYhddCVQUUv+PNenhVVO3jkSD8/3gLWbPakIvQsFKynA==" + }, "@svgr/babel-plugin-add-jsx-attribute": { "version": "4.2.0", "resolved": "https://registry.npmjs.org/@svgr/babel-plugin-add-jsx-attribute/-/babel-plugin-add-jsx-attribute-4.2.0.tgz", diff --git a/package.json b/package.json index 7fa00a6..d6fdfb6 100644 --- a/package.json +++ b/package.json @@ -7,12 +7,16 @@ "google-maps-react": "^2.0.2", "react": "^16.4.2", "react-dom": "^16.4.2", - "react-scripts": "3.0.0" + "react-scripts": "3.0.0", + "@snyk/protect": "latest" }, "scripts": { "start": "react-scripts start", "build": "react-scripts build", "test": "react-scripts test --env=jsdom", - "eject": "react-scripts eject" - } + "eject": "react-scripts eject", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true }