Merge branch 'master' into bulk-approve-reject-actions

This commit is contained in:
Kim Gardner
2017-10-18 22:42:31 +01:00
committed by GitHub
6 changed files with 1175 additions and 937 deletions
+5
View File
@@ -0,0 +1,5 @@
{
"exceptions": [
"https://nodesecurity.io/advisories/531"
]
}
-31
View File
@@ -1,31 +0,0 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.7.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
'npm:marked:20170907':
- marked:
reason: None given
expires: '2017-11-17T15:49:54.237Z'
- graphql-docs > marked:
reason: None given
expires: '2017-11-17T15:49:54.237Z'
- simplemde > marked:
reason: None given
expires: '2017-11-17T15:49:54.237Z'
'npm:shelljs:20140723':
- react-mdl-selectfield > @kadira/storybook-deployer > shelljs:
reason: None given
expires: '2017-11-17T15:49:54.237Z'
'npm:tunnel-agent:20170305':
- selenium-standalone > request > tunnel-agent:
reason: None given
expires: '2017-11-17T16:36:11.559Z'
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:marked:20170112':
- marked:
patched: '2017-10-11T02:07:15.455Z'
- graphql-docs > marked:
patched: '2017-10-11T02:07:15.455Z'
- simplemde > marked:
patched: '2017-10-11T02:07:15.455Z'
+7 -5
View File
@@ -1,6 +1,8 @@
# Talk [![CircleCI](https://circleci.com/gh/coralproject/talk.svg?style=svg)](https://circleci.com/gh/coralproject/talk)
# Talk
[![CircleCI](https://circleci.com/gh/coralproject/talk.svg?style=svg)](https://circleci.com/gh/coralproject/talk)
[![Deploy](https://www.herokucdn.com/deploy/button.svg)](https://dashboard.heroku.com/new?template=https%3A%2F%2Fgithub.com%2Fcoralproject%2Ftalk&env[TALK_FACEBOOK_APP_ID]=ignore&env[TALK_FACEBOOK_APP_SECRET]=ignore)
[![NSP Status](https://nodesecurity.io/orgs/coralproject/projects/07ce2e4c-99fb-48f8-b50b-69d2d2c081b8/badge)](https://nodesecurity.io/orgs/coralproject/projects/07ce2e4c-99fb-48f8-b50b-69d2d2c081b8)
Online comments are broken. Our open-source Talk tool rethinks how moderation, comment display, and conversation function, creating the opportunity for safer, smarter discussions around your work. [Read more about Talk here](https://coralproject.net/products/talk.html).
@@ -35,10 +37,10 @@ Talk uses [Nightwatch](http://nightwatchjs.org/) to write e2e tests. The testing
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
either express or implied.
See the License for the specific language governing permissions
See the License for the specific language governing permissions
and limitations under the License.
+3 -1
View File
@@ -21,7 +21,7 @@ dependencies:
# Install node dependencies.
- yarn --version
- yarn global add node-gyp --force
- yarn global add node-gyp nsp --force
- yarn
post:
# Build the static assets.
@@ -40,6 +40,8 @@ test:
override:
# Run the tests using the junit reporter.
- MOCHA_FILE=$CIRCLE_TEST_REPORTS/junit/test-results.xml MOCHA_REPORTER=mocha-junit-reporter yarn test
# Check dependancies using nsp.
- nsp check
deployment:
release:
+24 -27
View File
@@ -22,9 +22,7 @@
"test": "TEST_MODE=unit NODE_ENV=test jest && TEST_MODE=unit NODE_ENV=test mocha -R ${MOCHA_REPORTER:-spec}",
"test-cover": "TEST_MODE=unit NODE_ENV=test istanbul cover _mocha --report text --check-coverage -- -R spec",
"heroku-postbuild": "./bin/cli plugins reconcile && yarn build",
"generate-introspection": "WEBPACK=TRUE NODE_ENV=test ./scripts/generateIntrospectionResult.js",
"snyk-protect": "snyk protect",
"prepublish": "npm run snyk-protect"
"generate-introspection": "WEBPACK=TRUE NODE_ENV=test ./scripts/generateIntrospectionResult.js"
},
"talk": {
"migration": {
@@ -66,36 +64,36 @@
"apollo-client": "^1.9.1",
"app-module-path": "^2.2.0",
"autoprefixer": "^6.5.2",
"babel-cli": "^6.26.0",
"babel-core": "^6.26.0",
"babel-eslint": "^7.2.1",
"babel-cli": "6.26.0",
"babel-core": "6.26.0",
"babel-eslint": "7.2.3",
"babel-loader": "^7.1.2",
"babel-plugin-syntax-dynamic-import": "^6.18.0",
"babel-plugin-transform-async-to-generator": "^6.16.0",
"babel-plugin-transform-class-properties": "^6.23.0",
"babel-plugin-transform-decorators-legacy": "^1.3.4",
"babel-plugin-transform-async-to-generator": "6.24.1",
"babel-plugin-transform-class-properties": "6.24.1",
"babel-plugin-transform-decorators-legacy": "1.3.4",
"babel-plugin-transform-object-assign": "^6.8.0",
"babel-plugin-transform-object-rest-spread": "^6.26.0",
"babel-plugin-transform-react-jsx": "^6.23.0",
"babel-polyfill": "^6.26.0",
"babel-preset-es2015": "^6.24.0",
"babel-preset-es2015": "6.24.1",
"babel-preset-react": "^6.23.0",
"bcryptjs": "^2.4.3",
"body-parser": "^1.17.2",
"body-parser": "1.18.2",
"bowser": "^1.7.2",
"cli-table": "^0.3.1",
"clipboard": "^1.7.1",
"colors": "^1.1.2",
"commander": "^2.11.0",
"common-tags": "^1.4.0",
"compression": "^1.7.0",
"compression": "1.7.1",
"compression-webpack-plugin": "^1.0.0",
"cookie-parser": "^1.4.3",
"copy-webpack-plugin": "^4.0.0",
"cross-spawn": "^5.1.0",
"css-loader": "^0.28.5",
"dataloader": "^1.3.0",
"debug": "^3.0.1",
"debug": "3.1.0",
"dialog-polyfill": "^0.4.9",
"did-you-mean": "^0.0.1",
"dotenv": "^4.0.0",
@@ -103,44 +101,44 @@
"env-rewrite": "^1.0.2",
"eventemitter2": "^4.1.2",
"exports-loader": "^0.6.4",
"express": "^4.15.4",
"express": "4.16.0",
"file-loader": "^0.11.2",
"form-data": "^2.3.1",
"fs-extra": "^4.0.1",
"gql-merge": "^0.0.4",
"graphql": "^0.9.1",
"graphql-anywhere": "^3.1.0",
"graphql-docs": "^0.2.0",
"graphql-docs": "0.2.0",
"graphql-errors": "^2.1.0",
"graphql-redis-subscriptions": "^1.3.0",
"graphql-redis-subscriptions": "1.3.0",
"graphql-server-express": "^0.6.0",
"graphql-subscriptions": "^0.4.3",
"graphql-tag": "^1.2.3",
"graphql-tools": "^0.10.1",
"hammerjs": "^2.0.8",
"helmet": "^3.8.1",
"helmet": "3.8.2",
"history": "^3.0.0",
"immutability-helper": "^2.2.0",
"imports-loader": "^0.7.1",
"inquirer": "^3.2.2",
"ioredis": "^3.1.4",
"ioredis": "3.1.4",
"istanbul": "^1.1.0-alpha.1",
"joi": "^10.6.0",
"json-loader": "^0.5.7",
"jsonwebtoken": "^7.4.3",
"jwt-decode": "^2.2.0",
"keymaster": "^1.6.2",
"kue": "^0.11.6",
"kue": "0.11.6",
"license-webpack-plugin": "^1.0.0",
"linkify-it": "^2.0.3",
"lodash": "^4.16.6",
"marked": "^0.3.6",
"material-design-lite": "^1.2.1",
"metascraper": "^1.0.7",
"metascraper": "1.0.7",
"minimist": "^1.2.0",
"moment": "^2.18.1",
"mongoose": "^4.11.7",
"morgan": "^1.8.2",
"mongoose": "4.11.14",
"morgan": "1.9.0",
"ms": "^2.0.0",
"murmurhash-js": "^1.0.0",
"node-emoji": "^1.8.1",
@@ -152,7 +150,7 @@
"pluralize": "^7.0.0",
"postcss-loader": "^1.3.3",
"postcss-smart-import": "^0.5.1",
"precss": "^1.4.0",
"precss": "1.4.0",
"prop-types": "^15.5.10",
"pym.js": "^1.1.1",
"query-string": "^5.0.0",
@@ -173,12 +171,11 @@
"redux": "^3.6.0",
"redux-thunk": "^2.1.0",
"resolve": "^1.4.0",
"selenium-standalone": "^6.9.0",
"selenium-standalone": "6.9.0",
"semver": "^5.4.1",
"simplemde": "^1.11.2",
"smoothscroll-polyfill": "^0.3.5",
"snake-case": "^2.1.0",
"snyk": "^1.43.0",
"snake-case": "2.1.0",
"style-loader": "^0.16.0",
"subscriptions-transport-ws": "^0.7.2",
"timeago.js": "^2.0.3",
@@ -188,7 +185,7 @@
"url-loader": "^0.6.0",
"url-search-params": "^0.9.0",
"uuid": "^3.1.0",
"webpack": "^2.3.1",
"webpack": "2.4.1",
"webpack-sources": "^1.0.1",
"yaml-loader": "^0.4.0",
"yamljs": "^0.2.10"
+1136 -873
View File
File diff suppressed because it is too large Load Diff