From 12291da219cf308ed114f9082f11d8e12e4736bc Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 29 Oct 2019 07:35:42 +0000
Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-450202
---
 .snyk        | 22 ++++++++++++++++++++++
 package.json | 11 +++++++----
 2 files changed, 29 insertions(+), 4 deletions(-)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..58adb91
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,22 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-450202:
+    - '@syncano/test > lodash':
+        patched: '2019-10-29T07:35:40.345Z'
+    - jest > jest-cli > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash:
+        patched: '2019-10-29T07:35:40.345Z'
+    - jest > jest-cli > @jest/core > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash:
+        patched: '2019-10-29T07:35:40.345Z'
+    - jest > jest-cli > @jest/core > jest-runtime > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash:
+        patched: '2019-10-29T07:35:40.345Z'
+    - jest > jest-cli > @jest/core > jest-runner > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash:
+        patched: '2019-10-29T07:35:40.345Z'
+    - jest > jest-cli > @jest/core > @jest/reporters > jest-runtime > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash:
+        patched: '2019-10-29T07:35:40.345Z'
+    - jest > jest-cli > @jest/core > jest-runner > jest-runtime > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash:
+        patched: '2019-10-29T07:35:40.345Z'
+    - jest > jest-cli > @jest/core > jest-runner > jest-jasmine2 > jest-runtime > jest-config > jest-environment-jsdom > jsdom > request-promise-native > request-promise-core > lodash:
+        patched: '2019-10-29T07:35:40.345Z'
diff --git a/package.json b/package.json
index 3cf1653..4a4a44b 100644
--- a/package.json
+++ b/package.json
@@ -35,10 +35,11 @@
     "build": "tsc",
     "codecov": "codecov",
     "prebuild": "rimraf ./dist",
-    "prepublish": "npm run build",
+    "prepublish": "npm run snyk-protect && npm run build",
     "test": "jest",
     "canary": "npm version prerelease --preid=alpha",
-    "postinstall": "node ./scripts/postinstall.js"
+    "postinstall": "node ./scripts/postinstall.js",
+    "snyk-protect": "snyk protect"
   },
   "dependencies": {
     "@babel/core": "7.6.4",
@@ -55,7 +56,8 @@
     "cross-spawn": "6.0.5",
     "fs-extra": "8.1.0",
     "jest": "24.9.0",
-    "sinon": "7.5.0"
+    "sinon": "7.5.0",
+    "snyk": "^1.239.3"
   },
   "devDependencies": {
     "@types/form-data": "2.2.1",
@@ -71,5 +73,6 @@
     "bracketSpacing": false,
     "semi": false,
     "singleQuote": true
-  }
+  },
+  "snyk": true
 }