diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..bb94787f --- /dev/null +++ b/.snyk @@ -0,0 +1,11 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.19.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:marked:20150520': + - grunt-jquery-content > marked: + patched: '2021-05-11T02:07:40.709Z' + 'npm:minimatch:20160620': + - grunt-jquery-content > grunt-wordpress > gilded-wordpress > glob > minimatch: + patched: '2021-05-11T02:07:40.709Z' diff --git a/package.json b/package.json index f3fefa80..2f6ea712 100644 --- a/package.json +++ b/package.json @@ -17,10 +17,16 @@ "dependencies": { "grunt": "0.4.5", "grunt-cli": "0.1.13", - "grunt-jquery-content": "3.0.1", + "grunt-jquery-content": "3.0.3", "grunt-sri": "0.0.5", "handlebars": "4.0.5", "lodash": "4.12.0", - "semver": "5.1.0" - } + "semver": "5.1.0", + "snyk": "^1.590.0" + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }