diff --git a/.snyk b/.snyk new file mode 100644 index 00000000..d857a805 --- /dev/null +++ b/.snyk @@ -0,0 +1,15 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - grunt > glob-whatev > minimatch: + patched: '2022-06-22T07:51:08.659Z' + - grunt-clean > grunt > glob-whatev > minimatch: + patched: '2022-06-22T07:51:08.659Z' + - grunt-html > grunt > glob-whatev > minimatch: + patched: '2022-06-22T07:51:08.659Z' + 'npm:request:20160119': + - grunt-clean > grunt > prompt > winston > loggly > request: + patched: '2022-06-22T07:51:08.659Z' diff --git a/package.json b/package.json index 4fdb6d00..f206620e 100644 --- a/package.json +++ b/package.json @@ -21,12 +21,18 @@ } ], "dependencies": { - "grunt": "0.3.17", + "grunt": "0.4.0", "grunt-clean": "0.3.0", - "grunt-html": "0.1.1", + "grunt-html": "0.2.1", "grunt-wordpress": "1.0.7", - "grunt-jquery-content": "0.9.0", + "grunt-jquery-content": "3.1.0", "grunt-check-modules": "0.1.0", - "js-yaml": "2.0.1" - } + "js-yaml": "3.2.7", + "@snyk/protect": "latest" + }, + "scripts": { + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true }