From 88f2b7e4a699460a4253393d5cfef4853ee166b5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Apr 2020 06:35:45 +0000 Subject: [PATCH] fix: examples/feed/package.json & examples/feed/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hoek:20180212 --- examples/feed/.snyk | 8 ++++++++ examples/feed/package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 examples/feed/.snyk diff --git a/examples/feed/.snyk b/examples/feed/.snyk new file mode 100644 index 0000000000000..c450de3fc9716 --- /dev/null +++ b/examples/feed/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hoek:20180212': + - gatsby > joi2gql > hoek: + patched: '2020-04-15T06:35:42.904Z' diff --git a/examples/feed/package.json b/examples/feed/package.json index 8b1243c25ad15..297a6792eb160 100644 --- a/examples/feed/package.json +++ b/examples/feed/package.json @@ -10,7 +10,8 @@ "gatsby-source-filesystem": "^2.0.1", "gatsby-transformer-remark": "^2.1.1", "react": "^16.4.1", - "react-dom": "^16.4.1" + "react-dom": "^16.4.1", + "snyk": "^1.305.1" }, "keywords": [ "gatsby" @@ -19,6 +20,9 @@ "main": "index.js", "scripts": { "develop": "gatsby develop", - "build": "gatsby build" - } + "build": "gatsby build", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true } \ No newline at end of file