From ffd9bf477c354b9b5e5cfcfe59616fc20678df18 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 29 Aug 2018 13:20:44 +0000 Subject: [PATCH] fix: .snyk & package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:engine.io-client:20160426 - https://snyk.io/vuln/npm:ws:20160104 - https://snyk.io/vuln/npm:ws:20160624 - https://snyk.io/vuln/npm:ws:20160920 - https://snyk.io/vuln/npm:ws:20171108 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:request:20160119 --- .snyk | 4 +++- package.json | 7 ++++--- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/.snyk b/.snyk index 4a43212..a474cf9 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,10 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.10.2 +version: v1.12.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:request:20160119': - express-uglify > winston > loggly > request: patched: '2018-02-28T13:04:50.087Z' + - express-uglify > winston > loggly > request: + patched: '2018-08-29T13:20:42.168Z' diff --git a/package.json b/package.json index 399cbad..fab268d 100644 --- a/package.json +++ b/package.json @@ -5,17 +5,18 @@ "scripts": { "start": "node app", "snyk-protect": "snyk protect", - "prepublish": "npm run snyk-protect" + "prepublish": "npm run snyk-protect", + "prepare": "npm run snyk-protect" }, "dependencies": { "express": "4.16.0", "ejs": "*", "less-middleware": "~2.0.0", - "socket.io": "1.0.1", + "socket.io": "2.0.2", "express-uglify": "*", "lodash": "~4.17.5", "btoa": "~1.1.0", - "snyk": "^1.69.10" + "snyk": "^1.94.0" }, "devDependencies": { "grunt": "~0.4.1",