mirror of
https://github.com/clusterio/clusterio.git
synced 2026-11-11 15:04:52 +09:00
fix: .snyk & package.json to reduce vulnerabilities
The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hawk:20160119 - https://snyk.io/vuln/npm:http-signature:20150122 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:request:20160119 - https://snyk.io/vuln/npm:tunnel-agent:20170305 - https://snyk.io/vuln/npm:uglify-js:20151024
This commit is contained in:
1 parent
103409b0cd
commit
3f29a722bb
2 files changed
+43
-3
No files matched your search
@@ -1,8 +1,45 @@
|
||||
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
||||
version: v1.12.0
|
||||
version: v1.13.3
|
||||
ignore: {}
|
||||
# patches apply the minimum changes required to fix a vulnerability
|
||||
patch:
|
||||
'npm:lodash:20180130':
|
||||
- html5-validator > caporal > cli-table2 > lodash:
|
||||
patched: '2018-07-03T06:07:55.532Z'
|
||||
'npm:hawk:20160119':
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > less > request > hawk:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
'npm:http-signature:20150122':
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > less > request > http-signature:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
'npm:mime:20170907':
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > mime:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > less > mime:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > less > request > form-data > mime:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
'npm:minimatch:20160620':
|
||||
- node-factorio-api > documentation > highlight.js > gear > liftoff > findup-sync > glob > minimatch:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > gear > liftoff > findup-sync > glob > minimatch:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > glob > minimatch:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > jslint > glob > minimatch:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > jshint > cli > glob > minimatch:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > jshint > minimatch:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
'npm:request:20160119':
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > less > request:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
'npm:tunnel-agent:20170305':
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > less > request > tunnel-agent:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
'npm:uglify-js:20151024':
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > handlebars > uglify-js:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
- node-factorio-api > documentation > highlight.js > gear-lib > uglify-js:
|
||||
patched: '2019-02-25T06:48:21.845Z'
|
||||
+5
-2
@@ -11,7 +11,9 @@
|
||||
"docs": "documentation build index.js --config documentation.yml -f html -o docs",
|
||||
"livedocs": "documentation serve --watch *.js lib/** --config documentation.yml",
|
||||
"install": "node lib/npmPostinstall.js",
|
||||
"bundle-dependencies": "bundle-dependencies"
|
||||
"bundle-dependencies": "bundle-dependencies",
|
||||
"snyk-protect": "snyk protect",
|
||||
"prepublish": "npm run snyk-protect"
|
||||
},
|
||||
"keywords": [
|
||||
"factorio"
|
||||
@@ -65,7 +67,8 @@
|
||||
"socket.io-client": "^2.0.4",
|
||||
"socket.io-prometheus": "^0.2.1",
|
||||
"sync-request": "^4.0.1",
|
||||
"underscore": "^1.8.3"
|
||||
"underscore": "^1.8.3",
|
||||
"snyk": "^1.134.2"
|
||||
},
|
||||
"devDependencies": {
|
||||
"documentation": "^5.4.0",
|
||||
|
||||
Reference in new issue
Block a user