diff --git a/.snyk b/.snyk new file mode 100644 index 0000000000..edafd99fcc --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.21.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - sails-disk > waterline-criteria > lodash: + patched: '2021-08-11T16:32:42.195Z' + - sails-disk > waterline-cursor > lodash: + patched: '2021-08-11T16:32:42.195Z' diff --git a/package.json b/package.json index 121b7a1ddb..288382c460 100644 --- a/package.json +++ b/package.json @@ -22,55 +22,57 @@ }, "scripts": { "test": "mocha -b", - "prepublish": "npm prune" + "prepublish": "npm run snyk-protect && npm prune", + "snyk-protect": "snyk-protect" }, "directories": { "lib": "lib" }, "dependencies": { - "express": "3.4.3", - "waterline": "0.10.0-rc12", - "rc": "~0.3.3", + "express": "4.16.0", + "waterline": "0.13.1", + "rc": "~1.2.7", "sails-stringfile": "~0.3.0", "async": "~0.2.9", - "lodash": "~2.4.1", - "captains-log": "~0.11.8", - "reportback": "~0.1.4", + "lodash": "~4.17.21", + "captains-log": "~2.0.2", + "reportback": "~2.0.2", "sails-util": "~0.10.0", "colors": "~0.6.2", - "socket.io": "~0.9.14", + "socket.io": "~2.4.0", "connect-flash": "~0.1.1", "pluralize": "~0.0.5", "node-uuid": "~1.4.0", "ejs-locals": "~1.0.2", - "glob": "~3.2.9", + "glob": "~5.0.15", "i18n": "~0.4.1", - "sails-generate": "~0.10.2", + "sails-generate": "~1.16.8", "sails-build-dictionary": "~0.10.1", - "grunt-cli": "~0.1.11", - "ejs": "~0.8.4", - "sails-disk": "~0.10.0", + "grunt-cli": "~1.3.0", + "ejs": "~3.1.6", + "sails-disk": "~1.0.0", "commander": "~2.1.0", - "grunt": "0.4.2", + "grunt": "1.3.0", "grunt-contrib-copy": "~0.5.0", "grunt-contrib-clean": "~0.5.0", "grunt-contrib-concat": "~0.3.0", "grunt-sails-linker": "~0.9.5", - "grunt-contrib-jst": "~0.6.0", - "grunt-contrib-watch": "~0.5.3", + "grunt-contrib-jst": "~2.0.0", + "grunt-contrib-watch": "~1.0.0", "grunt-contrib-uglify": "~0.4.0", - "grunt-contrib-cssmin": "~0.9.0", - "grunt-contrib-less": "~0.10.0", - "grunt-contrib-coffee": "~0.10.1", + "grunt-contrib-cssmin": "~2.2.0", + "grunt-contrib-less": "~1.0.0", + "grunt-contrib-coffee": "~2.0.0", "grunt-sync": "~0.0.4", "express3-handlebars": "~0.5.0", "include-all": "~0.1.3", - "skipper": "~0.1.2", - "merge-defaults": "~0.1.0", - "anchor": "~0.10.0", + "skipper": "~0.9.0", + "merge-defaults": "~0.2.2", + "anchor": "~1.3.0", "mock-req": "~0.1.0", "mock-res": "~0.1.0", - "semver": "~2.2.1" + "semver": "~2.2.1", + "@snyk/protect": "latest" }, "devDependencies": { "root-require": "~0.2.0", @@ -105,5 +107,6 @@ }, "engines": { "node": ">= 0.10.0" - } + }, + "snyk": true }