diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..8a0869c --- /dev/null +++ b/.snyk @@ -0,0 +1,30 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - react-native > connect > compression > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > finalhandler > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > morgan > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > serve-index > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > body-parser > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > express-session > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > connect-timeout > debug: + patched: '2017-09-28T06:57:17.501Z' + - react-native > connect > serve-static > send > debug: + patched: '2017-09-28T06:57:17.501Z' + - reactotron-react-native > socket.io-client > debug: + patched: '2017-09-28T06:57:17.501Z' + - reactotron-react-native > socket.io-client > engine.io-client > debug: + patched: '2017-09-28T06:57:17.501Z' + - reactotron-react-native > socket.io-client > socket.io-parser > debug: + patched: '2017-09-28T06:57:17.501Z' diff --git a/package.json b/package.json index 8df9cef..c41e60f 100644 --- a/package.json +++ b/package.json @@ -5,7 +5,9 @@ "start": "node node_modules/react-native/local-cli/cli.js start", "generate-docs": "node_modules/.bin/jsdoc --configure .jsdoc.json", "docs": "npm run generate-docs && open docs/index.html", - "test": "jest" + "test": "jest", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "dependencies": { "apisauce": "github:skellock/apisauce", @@ -25,7 +27,8 @@ "reactotron-react-native": "^1.1.2", "reactotron-redux": "^1.1.2", "redux": "^3.5.2", - "redux-thunk": "^2.1.0" + "redux-thunk": "^2.1.0", + "snyk": "^1.41.1" }, "devDependencies": { "babel-jest": "^16.0.0", @@ -56,5 +59,6 @@ "bugs": { "url": "https://github.com/Devnetik/react-native-skeleton/issues" }, - "homepage": "https://github.com/Devnetik/react-native-skeleton#readme" + "homepage": "https://github.com/Devnetik/react-native-skeleton#readme", + "snyk": true }