[Snyk] Fix for 4 vulnerable dependency paths (#4398)

* fix: package.json & .snyk to reduce vulnerabilities


The following vulnerabilities are ignored:
- https://snyk.io/vuln/npm:hoek:20180212

Latest report for mozilla/addons-frontend:
https://snyk.io/test/github/mozilla/addons-frontend

* Added ignore reasons

* Remove prepublish script
This commit is contained in:
Snyk bot 2018-02-16 20:02:43 +00:00 коммит произвёл Kumar McMillan
Родитель 38b48fb3b5
Коммит 71b18da0a8
2 изменённых файлов: 14 добавлений и 1 удалений

13
.snyk
Просмотреть файл

@ -7,5 +7,18 @@ ignore:
We only use this for DOMPurify (no external fetching) so we are
probably not vulnerable
expires: '2018-02-23T22:52:31.923Z'
'npm:hoek:20180212':
- jsdom > request > hawk > hoek:
reason: Our app doesn't rely on HAWK
expires: '2018-03-17T17:23:51.194Z'
- jsdom > request > hawk > boom > hoek:
reason: Our app doesn't rely on HAWK
expires: '2018-03-17T17:23:51.194Z'
- jsdom > request > hawk > sntp > hoek:
reason: Our app doesn't rely on HAWK
expires: '2018-03-17T17:23:51.194Z'
- jsdom > request > hawk > cryptiles > boom > hoek:
reason: Our app doesn't rely on HAWK
expires: '2018-03-17T17:23:51.195Z'
patch: {}
version: v1.10.1

Просмотреть файл

@ -273,7 +273,7 @@
"semver": "^5.3.0",
"shelljs": "^0.8.0",
"sinon": "^4.0.0",
"snyk": "^1.69.3",
"snyk": "^1.69.7",
"style-loader": "^0.20.1",
"stylelint": "^8.0.0",
"stylelint-config-standard": "^17.0.0",