From 89765628d761f4edd7a9bb4d6c55871f1ab76a1a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 5 Oct 2022 18:27:34 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-MERGE-1040469 - https://snyk.io/vuln/SNYK-JS-MERGE-1042987 - https://snyk.io/vuln/SNYK-JS-MORGAN-72579 - https://snyk.io/vuln/SNYK-JS-NODEFETCH-2342118 - https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311 - https://snyk.io/vuln/SNYK-JS-PLIST-2405644 - https://snyk.io/vuln/SNYK-JS-SHELLQUOTE-1766506 - https://snyk.io/vuln/SNYK-JS-UGLIFYJS-1727251 - https://snyk.io/vuln/SNYK-JS-WS-1296835 - https://snyk.io/vuln/SNYK-JS-XMLDOM-1084960 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:base64-url:20180512 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:fresh:20170908 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:negotiator:20160616 - https://snyk.io/vuln/npm:plist:20180219 - https://snyk.io/vuln/npm:qs:20170213 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 --- .snyk | 10 ++++++++++ package.json | 18 ++++++++++-------- 2 files changed, 20 insertions(+), 8 deletions(-) create mode 100644 .snyk diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..40f02f1 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - react-native > plist > xmlbuilder > lodash: + patched: '2022-10-05T18:27:32.122Z' + - react-native > xcode > simple-plist > plist > xmlbuilder > lodash: + patched: '2022-10-05T18:27:32.122Z' diff --git a/package.json b/package.json index b40237e..2f4bc0a 100644 --- a/package.json +++ b/package.json @@ -4,18 +4,19 @@ "private": true, "scripts": { "start": "node node_modules/react-native/local-cli/cli.js start", - "test": "jest" + "test": "jest", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { - "native-base": "^2.0.13", - "react": "15.4.2", - "react-native": "0.42.3", + "native-base": "^3.0.0", + "react": "16.5.0", + "react-native": "0.64.0", "react-native-fit-image": "^1.4.7", "react-native-htmlview": "^0.8.0", - "react-native-router-flux": "^3.38.0", - "react-native-timeago": "^0.3.0" - + "react-native-timeago": "^0.3.0", + "@snyk/protect": "latest" }, "devDependencies": { "babel-jest": "19.0.0", @@ -25,5 +26,6 @@ }, "jest": { "preset": "react-native" - } + }, + "snyk": true }