From 061bd30a6462fcb6593d965964732c6fa5a82fbb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 4 May 2020 08:52:34 +0200 Subject: [PATCH 1/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index b6e197df..bff315d6 100644 --- a/package.json +++ b/package.json @@ -4,11 +4,12 @@ "description": "Android Debug Bridge interface", "main": "./build/index.js", "scripts": { - "prepublish": "gulp prepublish", + "prepublish": "npm run snyk-protect && gulp prepublish", "test": "gulp once", "watch": "gulp", "precommit-msg": "echo 'Pre-commit checks...' && exit 0", - "lint": "gulp eslint" + "lint": "gulp eslint", + "snyk-protect": "snyk protect" }, "repository": { "type": "git", @@ -36,7 +37,8 @@ "bluebird": "^2.10.2", "lodash": "^3.10.1", "source-map-support": "^0.3.2", - "teen_process": "^1.3.1" + "teen_process": "^1.3.1", + "snyk": "^1.317.0" }, "pre-commit": [ "precommit-msg", @@ -56,5 +58,6 @@ "eslint-plugin-mocha": "^3.0.0", "gulp": "^3.8.11", "pre-commit": "^1.1.3" - } + }, + "snyk": true } From 916c33557f08ac22ad4c07c8f3f53e8511b50c0d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 4 May 2020 08:52:35 +0200 Subject: [PATCH 2/2] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..0d376fd4 --- /dev/null +++ b/.snyk @@ -0,0 +1,18 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - teen_process > lodash: + patched: '2020-05-04T06:52:32.115Z' + - appium-support > lodash: + patched: '2020-05-04T06:52:32.115Z' + - asyncbox > lodash: + patched: '2020-05-04T06:52:32.115Z' + - appium-support > teen_process > lodash: + patched: '2020-05-04T06:52:32.115Z' + - appium-support > archiver > async > lodash: + patched: '2020-05-04T06:52:32.115Z' + - appium-support > request-promise > request-promise-core > lodash: + patched: '2020-05-04T06:52:32.115Z'