From 487b97ea9ca7677702464400da9c2c77ef814a43 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 1 Sep 2021 18:51:18 +0000 Subject: [PATCH] fix: eg/quickblox-bot/package.json & eg/quickblox-bot/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:ws:20160920 --- eg/quickblox-bot/.snyk | 8 ++++++++ eg/quickblox-bot/package.json | 10 +++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) create mode 100644 eg/quickblox-bot/.snyk diff --git a/eg/quickblox-bot/.snyk b/eg/quickblox-bot/.snyk new file mode 100644 index 0000000..a09d3a4 --- /dev/null +++ b/eg/quickblox-bot/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.21.5 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:ws:20160920': + - quickblox > nativescript-xmpp-client > net-browserify > express-ws > ws: + patched: '2021-09-01T18:51:16.325Z' diff --git a/eg/quickblox-bot/package.json b/eg/quickblox-bot/package.json index f0e4fbd..85df2a8 100644 --- a/eg/quickblox-bot/package.json +++ b/eg/quickblox-bot/package.json @@ -4,11 +4,15 @@ "description": "QuickBlox bot example for RiveScript-JS", "main": "index.js", "scripts": { - "test": "echo \"Error: no test specified\" && exit 1" + "test": "echo \"Error: no test specified\" && exit 1", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "author": "Igor Khomenko", "license": "MIT", "dependencies": { - "quickblox": "^2.3.1" - } + "quickblox": "^2.3.1", + "@snyk/protect": "latest" + }, + "snyk": true }