From 0475132b7d8dc594c35e2c28b31108e1e19101df Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 27 Apr 2023 23:15:08 +0000 Subject: [PATCH] fix: node_modules/is-error/package.json & node_modules/is-error/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-HAWK-2808852 - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:minimatch:20160620 --- node_modules/is-error/.snyk | 16 ++++++++++++++++ node_modules/is-error/package.json | 17 +++++++++++------ 2 files changed, 27 insertions(+), 6 deletions(-) create mode 100644 node_modules/is-error/.snyk diff --git a/node_modules/is-error/.snyk b/node_modules/is-error/.snyk new file mode 100644 index 0000000000..35df47f92b --- /dev/null +++ b/node_modules/is-error/.snyk @@ -0,0 +1,16 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - lint-trap > eslint > minimatch: + patched: '2023-04-27T23:15:01.899Z' + - lint-trap > jscs > minimatch: + patched: '2023-04-27T23:15:01.899Z' + - lint-trap > jscs > glob > minimatch: + patched: '2023-04-27T23:15:01.899Z' + - lint-trap > jshint > cli > glob > minimatch: + patched: '2023-04-27T23:15:01.899Z' + - lint-trap > jshint > minimatch: + patched: '2023-04-27T23:15:01.899Z' diff --git a/node_modules/is-error/package.json b/node_modules/is-error/package.json index 441791f231..078e4ceca5 100644 --- a/node_modules/is-error/package.json +++ b/node_modules/is-error/package.json @@ -14,15 +14,17 @@ "Raynos", "M.K. (https://github.com/mk-pmb)" ], - "dependencies": {}, + "dependencies": { + "@snyk/protect": "latest" + }, "devDependencies": { - "coveralls": "^2.10.0", - "istanbul": "^0.3.5", + "coveralls": "^3.0.0", + "istanbul": "^0.4.5", "lint-trap": "^1.0.0", "opn": "^1.0.1", "pre-commit": "0.0.11", "tap-spec": "^2.1.1", - "tape": "^3.4.0" + "tape": "^4.0.0" }, "license": "MIT", "scripts": { @@ -32,7 +34,9 @@ "cover": "istanbul cover --report html --print detail -- test/index.js && npm run check-cover -s", "check-cover": "istanbul check-coverage --branches=100 --lines=100 --functions=100", "view-cover": "opn ./coverage/index.html", - "travis": "npm run cover -s && istanbul report lcov && ((cat coverage/lcov.info | coveralls) || true)" + "travis": "npm run cover -s && istanbul report lcov && ((cat coverage/lcov.info | coveralls) || true)", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "engine": { "node": ">= 0.8.x" @@ -41,5 +45,6 @@ "test" ], "pre-commit.silent": true, - "ngen-version": "5.1.0" + "ngen-version": "5.1.0", + "snyk": true } \ No newline at end of file