From c4e71c609b01977146906ba2afb6aa9579490408 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 6 Oct 2019 23:59:48 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 10 ++++++++++ package.json | 10 +++++++--- 2 files changed, 17 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..402c848 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-HTTPSPROXYAGENT-469131: + - weibo > urllib > proxy-agent > https-proxy-agent: + patched: '2019-10-06T23:59:46.732Z' + - weibo > urllib > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-06T23:59:46.732Z' diff --git a/package.json b/package.json index a4bff61..ef294cc 100644 --- a/package.json +++ b/package.json @@ -4,7 +4,9 @@ "description": "HuJS Conference Website", "private": true, "scripts": { - "start": "node app.js" + "start": "node app.js", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "main": "./app.js", "repository": { @@ -24,7 +26,8 @@ "ejs": "0.8.0", "connect-i18n": "0.2.0", "weibo": "0.5.0", - "github": "0.1.4" + "github": "0.1.4", + "snyk": "^1.231.0" }, "author": "JacksonTian", "contributors": [ @@ -32,5 +35,6 @@ "Troy Howard (http://github.com/thoward)" ], "license": "MIT", - "customHost": "conf.cnodejs.org" + "customHost": "conf.cnodejs.org", + "snyk": true }