From fbf6f3fcbd08e7448891173aa2eebcf0e3bbba1e Mon Sep 17 00:00:00 2001 From: snyk-test Date: Wed, 3 Jul 2019 22:43:59 +0000 Subject: [PATCH] fix: babel-preset/.snyk & babel-preset/package.json to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-450202 --- babel-preset/.snyk | 26 ++++++++++++++++++++++++++ babel-preset/package.json | 10 ++++++++-- 2 files changed, 34 insertions(+), 2 deletions(-) create mode 100644 babel-preset/.snyk diff --git a/babel-preset/.snyk b/babel-preset/.snyk new file mode 100644 index 00000000000000..718184500184f9 --- /dev/null +++ b/babel-preset/.snyk @@ -0,0 +1,26 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-450202: + - metro-babel7-plugin-react-transform > lodash: + patched: '2019-07-03T22:43:56.136Z' + - '@babel/plugin-transform-block-scoping > lodash': + patched: '2019-07-03T22:43:56.136Z' + - '@babel/plugin-transform-unicode-regex > @babel/helper-regex > lodash': + patched: '2019-07-03T22:43:56.136Z' + - metro-babel7-plugin-react-transform > @babel/helper-module-imports > lodash: + patched: '2019-07-03T22:43:56.136Z' + - '@babel/plugin-transform-classes > @babel/helper-replace-supers > @babel/types > lodash': + patched: '2019-07-03T22:43:56.136Z' + - metro-babel7-plugin-react-transform > @babel/helper-module-imports > @babel/types > lodash: + patched: '2019-07-03T22:43:56.136Z' + - '@babel/plugin-transform-classes > @babel/helper-replace-supers > @babel/traverse > @babel/types > lodash': + patched: '2019-07-03T22:43:56.136Z' + - '@babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/generator > @babel/types > lodash': + patched: '2019-07-03T22:43:56.136Z' + - '@babel/plugin-transform-parameters > @babel/helper-call-delegate > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash': + patched: '2019-07-03T22:43:56.136Z' + - '@babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2019-07-03T22:43:56.136Z' diff --git a/babel-preset/package.json b/babel-preset/package.json index 77eaafb46f826d..5e9a070c01f3f7 100644 --- a/babel-preset/package.json +++ b/babel-preset/package.json @@ -41,6 +41,12 @@ "@babel/plugin-transform-template-literals": "7.0.0-beta.47", "@babel/plugin-transform-unicode-regex": "7.0.0-beta.47", "@babel/template": "7.0.0-beta.47", - "metro-babel7-plugin-react-transform": "^0.38.1" - } + "metro-babel7-plugin-react-transform": "^0.38.1", + "snyk": "^1.189.0" + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }