diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..12eee030 --- /dev/null +++ b/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:ms:20170412': + - appium-support > extract-zip > debug > ms: + patched: '2017-05-22T05:28:04.663Z' + - teen_process > appium-support > extract-zip > debug > ms: + patched: '2017-05-22T05:28:04.663Z' + - appium-support > teen_process > appium-support > extract-zip > debug > ms: + patched: '2017-05-22T05:28:04.663Z' diff --git a/package.json b/package.json index b6e197df..bd674712 100644 --- a/package.json +++ b/package.json @@ -4,11 +4,12 @@ "description": "Android Debug Bridge interface", "main": "./build/index.js", "scripts": { - "prepublish": "gulp prepublish", + "prepublish": "npm run snyk-protect && gulp prepublish", "test": "gulp once", "watch": "gulp", "precommit-msg": "echo 'Pre-commit checks...' && exit 0", - "lint": "gulp eslint" + "lint": "gulp eslint", + "snyk-protect": "snyk protect" }, "repository": { "type": "git", @@ -36,7 +37,8 @@ "bluebird": "^2.10.2", "lodash": "^3.10.1", "source-map-support": "^0.3.2", - "teen_process": "^1.3.1" + "teen_process": "^1.3.1", + "snyk": "^1.30.1" }, "pre-commit": [ "precommit-msg", @@ -56,5 +58,6 @@ "eslint-plugin-mocha": "^3.0.0", "gulp": "^3.8.11", "pre-commit": "^1.1.3" - } + }, + "snyk": true }