From 36e9095c714c3b903a2e7dbb48efa989075e9c92 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 10 Feb 2017 14:30:42 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:marked:20170112 Latest report for johannakoll/goof: https://snyk.io/test/github/johannakoll/goof --- .snyk | 7 ++++++- package.json | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index c7f70839814..4b4e5d2d76f 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,7 @@ -version: v1.5.0 +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.7.0 ignore: {} +# patches apply the minimum changes required to fix a vulnerability patch: 'npm:marked:20150520': - marked: @@ -9,3 +11,6 @@ patch: patched: '2016-06-20T21:30:32.216Z' - tap > coveralls > request: patched: '2016-06-20T21:30:32.216Z' + 'npm:marked:20170112': + - marked: + patched: '2017-02-10T14:30:42.132Z' diff --git a/package.json b/package.json index c041b2c54fd..69db4cdb9d0 100644 --- a/package.json +++ b/package.json @@ -30,7 +30,7 @@ "st": "1.1.0", "tap": "^5.7.0", "marked": "0.3.5", - "snyk": "1.14.3" + "snyk": "^1.25.0" }, "snyk": true } \ No newline at end of file