From 1374e3be3ad24ee2a2d257aabaa67c569c696082 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 31 Oct 2017 07:33:36 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:superagent:20170807 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:marked:20170907 Latest report for arjunrao87/bikeshare: https://snyk.io/test/github/arjunrao87/bikeshare --- .snyk | 5 ++++- package.json | 9 +++++---- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/.snyk b/.snyk index 7e83e16..3c345eb 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.8.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -12,3 +12,6 @@ patch: 'npm:marked:20170112': - react-scripts > jest > jest-cli > node-notifier > cli-usage > marked: patched: '2017-02-10T14:54:53.344Z' + 'npm:marked:20170907': + - react-scripts > jest > jest-cli > node-notifier > cli-usage > marked: + patched: '2017-10-31T07:33:36.436Z' diff --git a/package.json b/package.json index bf66433..6b9c1e4 100644 --- a/package.json +++ b/package.json @@ -16,10 +16,10 @@ "express": "4.14.0", "foreman": "1.4.1", "fs": "0.0.2", - "react-scripts": "0.6.1", + "react-scripts": "1.0.15", "sql.js": "^0.3.2", - "superagent": "^2.3.0", - "snyk": "^1.25.0" + "superagent": "^3.7.0", + "snyk": "^1.47.0" }, "scripts": { "start": "nf start -p 3000", @@ -29,5 +29,6 @@ "build": "react-scripts build", "test": "react-scripts test --env=jsdom", "eject": "react-scripts eject" - } + }, + "snyk": true }