chore(root): adds snyk integration

updates scripts & ci for snyk

.circleci/config.yml

@@ -29,6 +29,15 @@ jobs:
       - attach_workspace:
           at: ~/microauth-vkontakte
       - run: yarn start validate
+  check_dependencies:
+    docker:
+      - image: 'circleci/node:latest'
+    working_directory: ~/microauth-vkontakte
+    steps:
+      - checkout
+      - attach_workspace:
+          at: ~/microauth-vkontakte
+      - run: yarn start validate.dependencies
   test_node_7:
     docker:
       - image: 'circleci/node:7'
@@ -78,18 +87,24 @@ workflows:
       - validate_code:
           requires:
             - checkout_code
+      - check_dependencies:
+          requires:
+            - checkout_code
       - test_node_7:
           requires:
             - checkout_code
             - validate_code
+            - check_dependencies
       - test_node_8:
           requires:
             - checkout_code
             - validate_code
+            - check_dependencies
       - test_latest_and_report:
           requires:
             - checkout_code
             - validate_code
+            - check_dependencies
       - release:
           requires:
             - test_node_7

.snyk

@@ -0,0 +1,4 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.10.2
+ignore: {}
+patch: {}

package-scripts.js

@@ -31,6 +31,7 @@ module.exports = {
     },
     validate: {
       default: series.nps('lint.fix'),
+      dependencies: 'snyk test',
       withCoverage: series.nps('validate', 'test.coverage')
     }
   }

package.json

@@ -85,6 +85,7 @@
     "nps": "^5.9.0",
     "nps-utils": "^1.5.0",
     "prettier": "^1.12.0",
-    "semantic-release": "^15.1.7"
+    "semantic-release": "^15.1.7",
+    "snyk": "^1.71.0"
   }
 }