From 90c675856283004031be54760e1b845f980a47fa Mon Sep 17 00:00:00 2001 From: Michael Teeuw Date: Sat, 30 Jul 2016 16:06:48 +0200 Subject: [PATCH] Upgrade vulnerabilities. --- .snyk | 15 ++++++++++++++- package.json | 21 ++++++++++++--------- 2 files changed, 26 insertions(+), 10 deletions(-) diff --git a/.snyk b/.snyk index c126332f..fecea87b 100644 --- a/.snyk +++ b/.snyk @@ -1 +1,14 @@ -version: v1 +version: v1.5.2 +ignore: {} +patch: + 'npm:minimatch:20160620': + - snyk > recursive-readdir > minimatch: + patched: '2016-07-30T14:02:31.280Z' + 'npm:negotiator:20160616': + - socket.io > engine.io > accepts > negotiator: + patched: '2016-07-30T14:02:31.280Z' + 'npm:ws:20160624': + - socket.io > engine.io > ws: + patched: '2016-07-30T14:02:31.280Z' + - socket.io > socket.io-client > engine.io-client > ws: + patched: '2016-07-30T14:02:31.280Z' diff --git a/package.json b/package.json index d202526a..8c2b226b 100644 --- a/package.json +++ b/package.json @@ -8,7 +8,9 @@ "jscs": "jscs **/**/**/**/*.js", "stylelint": "stylelint css/main.css fonts/roboto.css", "htmlvalidator": "html-validator --file=index.html", - "test": "snyk test" + "test": "snyk test", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "repository": { "type": "git", @@ -38,15 +40,16 @@ "time-grunt": "latest" }, "dependencies": { - "express": "latest", + "express": "^4.14.0", "feedme": "latest", "iconv-lite": "latest", "moment": "latest", - "request": "latest", - "snyk": "latest", - "socket.io": "latest", + "request": "^2.74.0", + "rrule": "latest", + "snyk": "^1.14.1", + "socket.io": "^1.4.6", "valid-url": "latest", - "walk": "latest", - "rrule": "latest" - } -} + "walk": "latest" + }, + "snyk": true +} \ No newline at end of file