fix: package.json, yarn.lock & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
This commit is contained in:
snyk-bot 2020-07-10 04:13:48 +00:00
parent 1b05924070
commit 9adcd6090d
3 changed files with 1761 additions and 65 deletions

8
.snyk Normal file
View File

@ -0,0 +1,8 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.16.0
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-567746:
- ngx-childprocess > @types/electron > electron > @electron/get > global-tunnel-ng > lodash:
patched: '2020-07-10T04:10:11.863Z'

View File

@ -34,7 +34,9 @@
"prettier:write": "yarn prettier:base -- --write \"src/**/*.{ts,js,html,scss}\"", "prettier:write": "yarn prettier:base -- --write \"src/**/*.{ts,js,html,scss}\"",
"generate-licenses-file": "yarn license-checker --production --csv --out licenses.csv", "generate-licenses-file": "yarn license-checker --production --csv --out licenses.csv",
"prebuildforelectron": "node set-variables-in-env.js --set src/environments/environment.electron.prod.ts", "prebuildforelectron": "node set-variables-in-env.js --set src/environments/environment.electron.prod.ts",
"postbuildforelectron": "node set-variables-in-env.js --unset src/environments/environment.electron.prod.ts" "postbuildforelectron": "node set-variables-in-env.js --unset src/environments/environment.electron.prod.ts",
"snyk-protect": "snyk protect",
"prepare": "yarn run snyk-protect"
}, },
"private": true, "private": true,
"dependencies": { "dependencies": {
@ -85,7 +87,8 @@
"xterm-addon-attach": "^0.6.0", "xterm-addon-attach": "^0.6.0",
"xterm-addon-fit": "^0.4.0", "xterm-addon-fit": "^0.4.0",
"yargs": "^15.3.1", "yargs": "^15.3.1",
"zone.js": "~0.10.3" "zone.js": "~0.10.3",
"snyk": "^1.361.3"
}, },
"devDependencies": { "devDependencies": {
"@angular-devkit/build-angular": "~0.1000.0", "@angular-devkit/build-angular": "~0.1000.0",
@ -128,5 +131,6 @@
"ignore": [ "ignore": [
"typescript" "typescript"
] ]
} },
"snyk": true
} }

1808
yarn.lock

File diff suppressed because it is too large Load Diff