149 строки
6.5 KiB
Plaintext
149 строки
6.5 KiB
Plaintext
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
|
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
|
ignore:
|
|
'npm:content-type-parser:20170905':
|
|
- jsdom > content-type-parser:
|
|
reason: >-
|
|
We only use this for DOMPurify (no external fetching) so we are
|
|
probably not vulnerable
|
|
expires: '2018-02-23T22:52:31.923Z'
|
|
'npm:hoek:20180212':
|
|
- jsdom > request > hawk > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-03-17T17:23:51.194Z'
|
|
- jsdom > request > hawk > boom > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-03-17T17:23:51.194Z'
|
|
- jsdom > request > hawk > sntp > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-03-17T17:23:51.194Z'
|
|
- jsdom > request > hawk > cryptiles > boom > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-03-17T17:23:51.195Z'
|
|
- node-pre-gyp > request > hawk > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- node-pre-gyp > request > hawk > boom > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- node-pre-gyp > request > hawk > sntp > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- node-pre-gyp > request > hawk > cryptiles > boom > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- node-pre-gyp > hawk > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- node-pre-gyp > hawk > boom > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- node-pre-gyp > hawk > sntp > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- node-pre-gyp > hawk > cryptiles > boom > hoek:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
'npm:cryptiles:20180710':
|
|
- request > hawk > cryptiles:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:03:16.635Z'
|
|
- node-pre-gyp > hawk > cryptiles:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:03:16.635Z'
|
|
- node-pre-gyp > request > hawk > cryptiles:
|
|
reason: Our app doesn't rely on HAWK
|
|
expires: '2018-08-30T15:03:16.635Z'
|
|
- jsdom > hawk > cryptiles:
|
|
reason: Our app doesn't rely on hawk
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- jsdom > request > hawk > cryptiles:
|
|
reason: Our app doesn't rely on hawk
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- cryptiles:
|
|
reason: Our app doesn't rely on cryptiles
|
|
expires: '2018-08-30T15:19:55.117Z'
|
|
- hawk > cryptiles:
|
|
reason: Our app doesn't rely on hawk
|
|
expires: '2018-08-30T15:19:55.117Z'
|
|
- jsdom > cryptiles:
|
|
reason: Our app doesn't rely on hawk
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
'npm:deep-extend:20180409':
|
|
- node-pre-gyp > rc > deep-extend:
|
|
reason: Our app doesn't rely on node-pre-gyp
|
|
expires: '2018-08-30T15:03:16.635Z'
|
|
'npm:extend:20180424':
|
|
- node-pre-gyp > request > extend:
|
|
reason: Our app doesn't rely on request
|
|
expires: '2018-08-30T15:03:16.635Z'
|
|
- request > extend:
|
|
reason: Our app doesn't rely on request
|
|
expires: '2018-08-30T15:03:16.635Z'
|
|
- jsdom > request > extend:
|
|
reason: Our app doesn't rely on hawk
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
'npm:ua-parser-js:20180227':
|
|
- react > fbjs > ua-parser-js:
|
|
reason: Our app uses the correct version
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- react > prop-types > fbjs > ua-parser-js:
|
|
reason: Our app uses the correct version
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- react-dom > fbjs > ua-parser-js:
|
|
reason: Our app uses the correct version
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- react-dom > prop-types > fbjs > ua-parser-js:
|
|
reason: Our app uses the correct version
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- react-redux > prop-types > fbjs > ua-parser-js:
|
|
reason: Our app uses the correct version
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
- react-textarea-autosize > prop-types > fbjs > ua-parser-js:
|
|
reason: Our app uses the correct version
|
|
expires: '2018-08-30T15:19:55.118Z'
|
|
'npm:stringstream:20180511':
|
|
- node-pre-gyp > request > stringstream:
|
|
reason: Our app doesn't rely on request
|
|
expires: '2018-08-30T15:35:04.333Z'
|
|
- request > stringstream:
|
|
reason: Our app doesn't rely on request
|
|
expires: '2018-08-30T15:35:04.333Z'
|
|
'npm:chownr:20180731':
|
|
- chokidar > node-pre-gyp > tar > chownr:
|
|
reason: We only use chokidar in bin/server.js for development (file watching)
|
|
expires: '2018-08-30T21:19:40.011Z'
|
|
- chokidar > fsevents > node-pre-gyp > tar > chownr:
|
|
reason: We only use chokidar in bin/server.js for development (file watching)
|
|
expires: '2018-08-30T21:19:40.012Z'
|
|
- chokidar > fsevents > node-pre-gyp > tar > chownr:
|
|
reason: We only use chokidar in bin/server.js for development (file watching)
|
|
expires: '2018-11-10T12:45:45.390Z'
|
|
- chokidar > fsevents > node-pre-gyp > tar > chownr:
|
|
reason: We only use chokidar in bin/server.js for development (file watching)
|
|
expires: '2018-12-12T10:03:18.609Z'
|
|
- chokidar > fsevents > node-pre-gyp > tar > chownr:
|
|
reason: We only use chokidar in bin/server.js for development (file watching)
|
|
expires: '2019-01-13T03:36:20.641Z'
|
|
- node-pre-gyp > tar > chownr:
|
|
reason: chownr is only used by chokidar
|
|
expires: '2019-01-13T03:36:20.642Z'
|
|
- chokidar > fsevents > node-pre-gyp > tar > chownr:
|
|
reason: We only use chokidar in bin/server.js for development (file watching)
|
|
expires: '2019-02-13T08:53:31.604Z'
|
|
SNYK-JS-CHOWNR-73502:
|
|
- chokidar > fsevents > node-pre-gyp > tar > chownr:
|
|
reason: We only use chokidar in bin/server.js for development (file watching)
|
|
expires: '2019-02-13T08:53:31.604Z'
|
|
- node-pre-gyp > tar > chownr:
|
|
reason: None given
|
|
expires: '2019-02-13T08:53:31.604Z'
|
|
SNYK-JS-LODASH-450202:
|
|
- '*':
|
|
reason: >-
|
|
Affected functions are not used in our codebase (either directly or
|
|
indirectly)
|
|
expires: 2019-08-01T00:00:00.000Z
|
|
patch: {}
|
|
version: v1.13.5
|