[Snyk] Fix for 4 vulnerable dependency paths (#4398)
* fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are ignored: - https://snyk.io/vuln/npm:hoek:20180212 Latest report for mozilla/addons-frontend: https://snyk.io/test/github/mozilla/addons-frontend * Added ignore reasons * Remove prepublish script
This commit is contained in:
Родитель
38b48fb3b5
Коммит
71b18da0a8
13
.snyk
13
.snyk
|
@ -7,5 +7,18 @@ ignore:
|
|||
We only use this for DOMPurify (no external fetching) so we are
|
||||
probably not vulnerable
|
||||
expires: '2018-02-23T22:52:31.923Z'
|
||||
'npm:hoek:20180212':
|
||||
- jsdom > request > hawk > hoek:
|
||||
reason: Our app doesn't rely on HAWK
|
||||
expires: '2018-03-17T17:23:51.194Z'
|
||||
- jsdom > request > hawk > boom > hoek:
|
||||
reason: Our app doesn't rely on HAWK
|
||||
expires: '2018-03-17T17:23:51.194Z'
|
||||
- jsdom > request > hawk > sntp > hoek:
|
||||
reason: Our app doesn't rely on HAWK
|
||||
expires: '2018-03-17T17:23:51.194Z'
|
||||
- jsdom > request > hawk > cryptiles > boom > hoek:
|
||||
reason: Our app doesn't rely on HAWK
|
||||
expires: '2018-03-17T17:23:51.195Z'
|
||||
patch: {}
|
||||
version: v1.10.1
|
||||
|
|
|
@ -273,7 +273,7 @@
|
|||
"semver": "^5.3.0",
|
||||
"shelljs": "^0.8.0",
|
||||
"sinon": "^4.0.0",
|
||||
"snyk": "^1.69.3",
|
||||
"snyk": "^1.69.7",
|
||||
"style-loader": "^0.20.1",
|
||||
"stylelint": "^8.0.0",
|
||||
"stylelint-config-standard": "^17.0.0",
|
||||
|
|
Загрузка…
Ссылка в новой задаче