From 20820f3d80f28af55d90a0e0b9b9043a89f58b38 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 6 Oct 2022 16:49:29 +0000 Subject: [PATCH] fix: examples/uppy-with-companion/package.json & examples/uppy-with-companion/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 --- examples/uppy-with-companion/.snyk | 11 +++++++++++ examples/uppy-with-companion/package.json | 10 +++++++--- 2 files changed, 18 insertions(+), 3 deletions(-) create mode 100644 examples/uppy-with-companion/.snyk diff --git a/examples/uppy-with-companion/.snyk b/examples/uppy-with-companion/.snyk new file mode 100644 index 0000000000..73f90b636b --- /dev/null +++ b/examples/uppy-with-companion/.snyk @@ -0,0 +1,11 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - upload-server > express-directory > finalhandler > debug: + patched: '2022-10-06T16:49:27.800Z' + 'npm:ms:20170412': + - upload-server > express-directory > finalhandler > debug > ms: + patched: '2022-10-06T16:49:27.800Z' diff --git a/examples/uppy-with-companion/package.json b/examples/uppy-with-companion/package.json index 8821ccc8ed..a901ad6cbb 100644 --- a/examples/uppy-with-companion/package.json +++ b/examples/uppy-with-companion/package.json @@ -5,7 +5,8 @@ "express": "^4.16.2", "express-session": "^1.15.6", "light-server": "^2.4.0", - "upload-server": "^1.1.6" + "upload-server": "^1.1.6", + "@snyk/protect": "latest" }, "license": "ISC", "main": "index.js", @@ -14,6 +15,9 @@ "client": "light-server -p 3000 -s client", "server": "node ./server/index.js", "start": "npm run server & npm run client", - "test": "echo \"Error: no test specified\" && exit 1" - } + "test": "echo \"Error: no test specified\" && exit 1", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true }