From f5e9211ca762cc984b56502517a0ec9bcfff094b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 7 Oct 2022 14:35:08 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-MARKED-174116 - https://snyk.io/vuln/SNYK-JS-MARKED-2342073 - https://snyk.io/vuln/SNYK-JS-MARKED-2342082 - https://snyk.io/vuln/SNYK-JS-MARKED-451540 - https://snyk.io/vuln/SNYK-JS-MARKED-584281 - https://snyk.io/vuln/SNYK-JS-STRIPTAGS-1312310 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:lodash:20180130 - https://snyk.io/vuln/npm:request:20160119 --- .snyk | 8 +++++++- package.json | 12 ++++++------ 2 files changed, 13 insertions(+), 7 deletions(-) diff --git a/.snyk b/.snyk index de54052..ca24adf 100644 --- a/.snyk +++ b/.snyk @@ -1,8 +1,14 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.0 +version: v1.25.0 ignore: {} # patches apply the minimum changes required to fix a vulnerability patch: 'npm:marked:20170112': - blessed-contrib > marked: patched: '2017-02-10T14:48:34.665Z' + 'npm:lodash:20180130': + - cli-table2 > lodash: + patched: '2022-10-07T14:34:20.999Z' + 'npm:request:20160119': + - blessed-contrib > picture-tube > request: + patched: '2022-10-07T14:34:20.999Z' diff --git a/package.json b/package.json index ac85186..d1b0a43 100644 --- a/package.json +++ b/package.json @@ -12,7 +12,7 @@ "cov-html": "./node_modules/.bin/nyc report --reporter=html", "lint": "./node_modules/.bin/eslint -c .eslintrc src/**", "single": "./node_modules/.bin/nyc ./node_modules/.bin/mocha --compilers js:babel-register \"tests/crawler/test_ratings.js\" & npm run cov-html", - "snyk-protect": "snyk protect", + "snyk-protect": "snyk-protect", "prepublish": "npm run snyk-protect" }, "nyc": { @@ -64,15 +64,15 @@ "JSONStream": "^1.2.1", "async": "^2.0.1", "blessed": "^0.1.81", - "blessed-contrib": "^3.5.5", - "chalk": "^1.1.3", + "blessed-contrib": "^4.11.0", + "chalk": "^2.0.0", "cheerio": "^0.22.0", "cli-table2": "^0.2.0", "commander": "^2.9.0", "crypto-js": "^3.1.7", "figlet": "^1.2.0", "has": "^1.0.1", - "inquirer": "^1.2.1", + "inquirer": "^3.2.0", "jsonfile": "^2.4.0", "lodash": "^4.16.3", "mkdirp": "^0.5.1", @@ -80,8 +80,8 @@ "ora": "^0.3.0", "qs": "^6.2.1", "request": "^2.75.0", - "striptags": "^2.1.1", - "snyk": "^1.25.0" + "striptags": "^3.2.0", + "@snyk/protect": "latest" }, "snyk": true }