From 5f7ed0727e991630bce2982b1edf47d0a6a002de Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 6 Oct 2019 05:02:28 +0000 Subject: [PATCH] fix: package.json & .snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-HTTPSPROXYAGENT-469131 --- .snyk | 7 ++++++- package.json | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.snyk b/.snyk index 3295954..28a53b4 100644 --- a/.snyk +++ b/.snyk @@ -1,5 +1,5 @@ # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. -version: v1.7.1 +version: v1.13.5 # ignores vulnerabilities until expiry date; change duration by modifying expiry date ignore: 'npm:marked:20170907': @@ -11,3 +11,8 @@ patch: 'npm:marked:20170112': - marked: patched: '2017-05-18T09:25:23.798Z' + SNYK-JS-HTTPSPROXYAGENT-469131: + - snyk > proxy-agent > https-proxy-agent: + patched: '2019-10-06T05:02:26.534Z' + - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent: + patched: '2019-10-06T05:02:26.534Z' diff --git a/package.json b/package.json index 68d56f8..309cff7 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,7 @@ "handlebars": "^4.0.8", "marked": "^0.3.6", "moment": "^2.18.1", - "snyk": "^1.41.1", + "snyk": "^1.231.0", "minimist": "^1.2.0" }, "bin": {