From 0e849488e256dd1c60cb283e934d03ad90d6181d Mon Sep 17 00:00:00 2001 From: Hornwitser Date: Thu, 1 Aug 2019 20:25:41 +0200 Subject: [PATCH] Remove snyk It's not supposed to be installed as a dependency in the first place, and this seems like the wrong solution to there being too many stinking dependencies to keep track the security of. --- .snyk | 45 --------------------------------------------- package.json | 8 ++------ 2 files changed, 2 insertions(+), 51 deletions(-) delete mode 100644 .snyk diff --git a/.snyk b/.snyk deleted file mode 100644 index d7f0b403..00000000 --- a/.snyk +++ /dev/null @@ -1,45 +0,0 @@ -# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.13.3 -ignore: {} -# patches apply the minimum changes required to fix a vulnerability -patch: - 'npm:lodash:20180130': - - html5-validator > caporal > cli-table2 > lodash: - patched: '2018-07-03T06:07:55.532Z' - 'npm:hawk:20160119': - - node-factorio-api > documentation > highlight.js > gear-lib > less > request > hawk: - patched: '2019-02-25T06:48:21.845Z' - 'npm:http-signature:20150122': - - node-factorio-api > documentation > highlight.js > gear-lib > less > request > http-signature: - patched: '2019-02-25T06:48:21.845Z' - 'npm:mime:20170907': - - node-factorio-api > documentation > highlight.js > gear-lib > mime: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > less > mime: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > less > request > form-data > mime: - patched: '2019-02-25T06:48:21.845Z' - 'npm:minimatch:20160620': - - node-factorio-api > documentation > highlight.js > gear > liftoff > findup-sync > glob > minimatch: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > gear > liftoff > findup-sync > glob > minimatch: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > glob > minimatch: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > jslint > glob > minimatch: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > jshint > cli > glob > minimatch: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > jshint > minimatch: - patched: '2019-02-25T06:48:21.845Z' - 'npm:request:20160119': - - node-factorio-api > documentation > highlight.js > gear-lib > less > request: - patched: '2019-02-25T06:48:21.845Z' - 'npm:tunnel-agent:20170305': - - node-factorio-api > documentation > highlight.js > gear-lib > less > request > tunnel-agent: - patched: '2019-02-25T06:48:21.845Z' - 'npm:uglify-js:20151024': - - node-factorio-api > documentation > highlight.js > gear-lib > handlebars > uglify-js: - patched: '2019-02-25T06:48:21.845Z' - - node-factorio-api > documentation > highlight.js > gear-lib > uglify-js: - patched: '2019-02-25T06:48:21.845Z' diff --git a/package.json b/package.json index 093dc0ae..fdf26872 100644 --- a/package.json +++ b/package.json @@ -9,9 +9,7 @@ "start": "echo Run node client.js start [instance] to start slaves && node master.js", "cover": "./node_modules/.bin/istanbul cover ./node_modules/mocha/bin/_mocha -- \"./{,!(node_modules)/**/}*.spec.js\" -R spec || echo . && codecov -t f7b38085-36eb-4d72-84e6-64721910171e", "install": "node lib/npmPostinstall.js", - "bundle-dependencies": "bundle-dependencies", - "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "bundle-dependencies": "bundle-dependencies" }, "keywords": [ "factorio" @@ -63,7 +61,6 @@ "sanitizer": "^0.1.3", "simple-git": "^1.96.0", "single-line-log": "^1.1.2", - "snyk": "^1.134.2", "socket.io": "^2.0.4", "socket.io-client": "^2.0.4", "socket.io-prometheus": "^0.2.1", @@ -80,6 +77,5 @@ "nock": "^9.1.6", "sinon": "^2.4.1", "supertest": "^3.0.0" - }, - "snyk": true + } }