diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..c6509f6e --- /dev/null +++ b/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - styled-components > babel-plugin-styled-components > lodash: + patched: '2019-07-04T03:08:29.850Z' + - styled-components > @babel/helper-module-imports > @babel/types > lodash: + patched: '2019-07-04T03:08:29.850Z' + - styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash: + patched: '2019-07-04T03:08:29.850Z' diff --git a/package.json b/package.json index 0983b332..8f34d317 100644 --- a/package.json +++ b/package.json @@ -28,7 +28,9 @@ "storybook:start": "start-storybook -p 9009 -s public", "test": "jest", "ts": "ts-node -r dotenv/config -O '{ \"isolatedModules\": false, \"module\": \"commonjs\" }' ", - "type-check": "tsc -p tsconfig.production.json" + "type-check": "tsc -p tsconfig.production.json", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "husky": { "hooks": { @@ -102,7 +104,8 @@ "semver": "^5.6.0", "styled-components": "^4.1.1", "styled-system": "^2.2.1", - "utility-types": "^3.6.1" + "utility-types": "^3.6.1", + "snyk": "^1.189.0" }, "devDependencies": { "@storybook/addon-actions": "^5.0.6", @@ -169,5 +172,6 @@ "eslint-plugin-react": "^7.12.4", "graphql": "14.2.1", "typescript": "3.3.4000" - } + }, + "snyk": true }