diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..b0fb216 --- /dev/null +++ b/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - semantic-ui-react > lodash: + patched: '2022-09-29T23:14:34.017Z' diff --git a/package.json b/package.json index 94526a3..3f47e77 100644 --- a/package.json +++ b/package.json @@ -19,17 +19,20 @@ "start": "nwb serve-react-demo", "test": "node tests/index.js", "test:coverage": "node tests/index.js --coverage", - "test:watch": "node tests/index.js --watch" + "test:watch": "node tests/index.js --watch", + "prepare": "yarn run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "faker": "4.1.0", "immutability-helper": "3.0.2", - "moment": "2.22.2", + "moment": "2.29.4", "react-base-table": "1.9.3", "react-csv": "2.0.3", "react-virtualized-auto-sizer": "1.0.2", "semantic-ui-css": "2.4.1", - "semantic-ui-react": "0.88.2" + "semantic-ui-react": "0.88.2", + "@snyk/protect": "latest" }, "peerDependencies": { "react": "^16.8.0" @@ -111,5 +114,6 @@ "keywords": [ "react-component", "genomics" - ] + ], + "snyk": true } diff --git a/yarn.lock b/yarn.lock index 94d18f9..04613b1 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1322,6 +1322,11 @@ exenv "^1.2.2" prop-types "^15.6.2" +"@snyk/protect@^1.1017.0": + version "1.1017.0" + resolved "https://registry.yarnpkg.com/@snyk/protect/-/protect-1.1017.0.tgz#c7ad3dc767fe4fe2bcccc02501d860eafb8bcb57" + integrity sha512-6WHVyRUBba7Q/e6BAbn3+J3SSvBQU0Ps9YItg9Z/B7w91JusSCq6P4KTNt66AZxHwQ1X2iUbIWrkNEIpKuXePQ== + "@stardust-ui/react-component-event-listener@~0.38.0": version "0.38.0" resolved "https://registry.yarnpkg.com/@stardust-ui/react-component-event-listener/-/react-component-event-listener-0.38.0.tgz#1787faded94b40ad41226e6289baf13e701c6e7f" @@ -7924,10 +7929,10 @@ mocha@7.1.1: yargs-parser "13.1.2" yargs-unparser "1.6.0" -moment@2.22.2: - version "2.22.2" - resolved "https://registry.yarnpkg.com/moment/-/moment-2.22.2.tgz#3c257f9839fc0e93ff53149632239eb90783ff66" - integrity sha1-PCV/mDn8DpP/UxSWMiOeuQeD/2Y= +moment@2.29.4: + version "2.29.4" + resolved "https://registry.yarnpkg.com/moment/-/moment-2.29.4.tgz#3dbe052889fe7c1b2ed966fcb3a77328964ef108" + integrity sha512-5LC9SOxjSc2HF6vO2CyuTDNivEdoz2IvyJJGj6X8DJ0eFyfszE0QiEd+iXmBvUP3WHxSjFH/vIsA0EN00cgr8w== moo@^0.5.0: version "0.5.1"