From 1139a02aa1e2b30cedd74e47bb65207760482d4a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 1 Apr 2024 18:18:12 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- .snyk | 18 ++++++++++++++++++ package.json | 10 +++++++--- 2 files changed, 25 insertions(+), 3 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..cf929d6 --- /dev/null +++ b/.snyk @@ -0,0 +1,18 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - murmur-client > libp2p-websocket-star > async > lodash: + patched: '2024-04-01T18:18:10.439Z' + id: SNYK-JS-LODASH-567746 + path: murmur-client > libp2p-websocket-star > async > lodash + - status-js-api > web3 > web3-shh > web3-utils > lodash: + patched: '2024-04-01T18:18:10.439Z' + id: SNYK-JS-LODASH-567746 + path: status-js-api > web3 > web3-shh > web3-utils > lodash + - status-js-api > web3 > web3-eth-personal > web3-core-helpers > lodash: + patched: '2024-04-01T18:18:10.439Z' + id: SNYK-JS-LODASH-567746 + path: status-js-api > web3 > web3-eth-personal > web3-core-helpers > lodash diff --git a/package.json b/package.json index ea2bc0d..925ff3b 100644 --- a/package.json +++ b/package.json @@ -33,14 +33,17 @@ "react-youtube": "^7.8.0", "status-js-api": "^1.2.6", "typescript": "^3.2.4", - "uuid": "^3.3.2" + "uuid": "^3.3.2", + "@snyk/protect": "latest" }, "scripts": { "start": "react-scripts start", "build": "react-scripts build", "build-opt": "react-scripts --max_old_space_size=4096 build", "test": "react-scripts test", - "eject": "react-scripts eject" + "eject": "react-scripts eject", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "eslintConfig": { "extends": "react-app" @@ -50,5 +53,6 @@ "not dead", "not ie <= 11", "not op_mini all" - ] + ], + "snyk": true }