mirror of
https://github.com/wassname/talk.git
synced 2026-07-01 01:44:43 +08:00
fix: package.json & .snyk to reduce vulnerabilities
The following vulnerabilities are ignored: - https://snyk.io/vuln/npm:marked:20170907 - https://snyk.io/vuln/npm:shelljs:20140723 Latest report for coralproject/talk: https://snyk.io/test/github/coralproject/talk
This commit is contained in:
@@ -1,6 +1,21 @@
|
||||
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
||||
version: v1.7.1
|
||||
ignore: {}
|
||||
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
||||
ignore:
|
||||
'npm:marked:20170907':
|
||||
- marked:
|
||||
reason: None given
|
||||
expires: '2017-11-17T15:49:54.237Z'
|
||||
- graphql-docs > marked:
|
||||
reason: None given
|
||||
expires: '2017-11-17T15:49:54.237Z'
|
||||
- simplemde > marked:
|
||||
reason: None given
|
||||
expires: '2017-11-17T15:49:54.237Z'
|
||||
'npm:shelljs:20140723':
|
||||
- react-mdl-selectfield > @kadira/storybook-deployer > shelljs:
|
||||
reason: None given
|
||||
expires: '2017-11-17T15:49:54.237Z'
|
||||
# patches apply the minimum changes required to fix a vulnerability
|
||||
patch:
|
||||
'npm:marked:20170112':
|
||||
|
||||
+1
-1
@@ -186,7 +186,7 @@
|
||||
"webpack-sources": "^1.0.1",
|
||||
"yaml-loader": "^0.4.0",
|
||||
"yamljs": "^0.2.10",
|
||||
"snyk": "^1.42.5"
|
||||
"snyk": "^1.43.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@coralproject/eslint-config-talk": "^0.0.4",
|
||||
|
||||
Reference in New Issue
Block a user