fix: package.json & .snyk to reduce vulnerabilities (#6)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:qs:20170213


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:request:20160119

Latest report for d2s/koodiklinikka.fi-api:
https://snyk.io/test/github/d2s/koodiklinikka.fi-api
This commit is contained in:
Daniel Schildt
2017-08-04 17:00:37 +03:00
committed by Riku Rouvila
parent bcb0376ce2
commit a55ce62455
2 changed files with 16 additions and 4 deletions

8
.snyk Normal file
View File

@@ -0,0 +1,8 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.7.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:request:20160119':
- node-twitter > request:
patched: '2017-08-04T11:59:07.441Z'

View File

@@ -5,7 +5,9 @@
"main": "index.js",
"scripts": {
"test": "echo \"Error: no test specified\" && exit 1",
"start": "node index.js"
"start": "node index.js",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
},
"repository": {
"type": "git",
@@ -32,7 +34,9 @@
"newrelic": "^1.18.0",
"node-twitter": "0.5.2",
"stripe": "^4.23.1",
"superagent": "^0.21.0",
"validator": "^3.27.0"
}
"superagent": "^2.0.0",
"validator": "^3.27.0",
"snyk": "^1.38.1"
},
"snyk": true
}