diff --git a/frontend/.snyk b/frontend/.snyk new file mode 100644 index 0000000..c95d816 --- /dev/null +++ b/frontend/.snyk @@ -0,0 +1,26 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@nrwl/angular > @nrwl/cypress > fork-ts-checker-webpack-plugin > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/preset-env > @babel/plugin-transform-modules-umd > @babel/helper-module-transforms > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/preset-env > @babel/plugin-transform-object-super > @babel/helper-replace-supers > @babel/traverse > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/preset-env > @babel/plugin-transform-object-super > @babel/helper-replace-supers > @babel/traverse > @babel/generator > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/preset-env > @babel/plugin-transform-object-super > @babel/helper-replace-supers > @babel/traverse > @babel/generator > @babel/types > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > @babel/types > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/preset-env > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > jasmine-marbles > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/core > lodash': + patched: '2020-05-01T03:32:15.018Z' + - '@nrwl/angular > @nrwl/cypress > @cypress/webpack-preprocessor > @babel/preset-env > @babel/plugin-transform-block-scoping > lodash': + patched: '2020-05-01T03:32:15.018Z' diff --git a/frontend/package.json b/frontend/package.json index 9134e40..ca500d2 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -24,7 +24,9 @@ "update:check": "ng update", "workspace-schematic": "./node_modules/.bin/nx workspace-schematic", "dep-graph": "./node_modules/.bin/nx dep-graph", - "help": "./node_modules/.bin/nx help" + "help": "./node_modules/.bin/nx help", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" }, "private": true, "dependencies": { @@ -40,7 +42,8 @@ "@nrwl/angular": "8.6.0", "core-js": "^2.5.4", "rxjs": "6.5.3", - "zone.js": "~0.9.1" + "zone.js": "~0.9.1", + "snyk": "^1.316.1" }, "devDependencies": { "@angular-devkit/build-angular": "~0.803.8", @@ -62,5 +65,6 @@ "ts-node": "~7.0.0", "tslint": "~5.11.0", "typescript": "3.5.3" - } + }, + "snyk": true }