From 583ef505795680330a611b0e5cba251e0ebffd55 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 12:31:19 +0530 Subject: [PATCH 1/2] fix: @alias/commitlint/package.json & @alias/commitlint/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- @alias/commitlint/package.json | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/@alias/commitlint/package.json b/@alias/commitlint/package.json index 085f3985b9..6b1f56c19d 100644 --- a/@alias/commitlint/package.json +++ b/@alias/commitlint/package.json @@ -10,7 +10,9 @@ }, "scripts": { "deps": "dep-check", - "pkg": "pkg-check --skip-main" + "pkg": "pkg-check --skip-main", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "engines": { "node": ">=8" @@ -34,10 +36,12 @@ }, "license": "MIT", "dependencies": { - "@commitlint/cli": "^8.3.5" + "@commitlint/cli": "^8.3.5", + "snyk": "^1.316.1" }, "devDependencies": { "@commitlint/utils": "^8.3.4", "@commitlint/test": "8.2.0" - } + }, + "snyk": true } From 7a2d236a449df0bb41f7e9cfe094210c8fe3bc9c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 1 May 2020 12:31:20 +0530 Subject: [PATCH 2/2] fix: @alias/commitlint/package.json & @alias/commitlint/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- @alias/commitlint/.snyk | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 @alias/commitlint/.snyk diff --git a/@alias/commitlint/.snyk b/@alias/commitlint/.snyk new file mode 100644 index 0000000000..01503be5c0 --- /dev/null +++ b/@alias/commitlint/.snyk @@ -0,0 +1,16 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@commitlint/cli > lodash': + patched: '2020-05-01T07:01:17.018Z' + - '@commitlint/cli > @commitlint/load > lodash': + patched: '2020-05-01T07:01:17.018Z' + - '@commitlint/cli > @commitlint/load > @commitlint/resolve-extends > lodash': + patched: '2020-05-01T07:01:17.018Z' + - '@commitlint/cli > @commitlint/lint > @commitlint/parse > conventional-commits-parser > lodash': + patched: '2020-05-01T07:01:17.018Z' + - '@commitlint/cli > @commitlint/lint > @commitlint/rules > @commitlint/ensure > lodash': + patched: '2020-05-01T07:01:17.018Z'