From 5a9fb0dd0cb904c58cbe8fe1745c7ba94977dc2a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 31 Oct 2017 06:47:08 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:marked:20170907 Latest report for 401ode/dashboard: https://snyk.io/test/github/401ode/dashboard --- .snyk | 5 ++++- package.json | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 2b58f27..1571b45 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.8.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: @@ -8,3 +8,6 @@ patch: patched: '2017-09-26T06:47:08.890Z' - gulp-mocha > mocha > debug: patched: '2017-09-26T06:47:08.890Z' + 'npm:marked:20170907': + - marked: + patched: '2017-10-31T06:47:08.729Z' diff --git a/package.json b/package.json index 09f1b60..e7274ce 100644 --- a/package.json +++ b/package.json @@ -31,7 +31,7 @@ "underscore": "^1.8.3", "watchify": "^3.6.1", "yamljs": "^0.2.4", - "snyk": "^1.41.1" + "snyk": "^1.47.0" }, "snyk": true }