diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..31cfa8f --- /dev/null +++ b/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - styled-components > babel-plugin-styled-components > lodash: + patched: '2020-05-01T03:07:53.201Z' + - styled-components > @babel/helper-module-imports > @babel/types > lodash: + patched: '2020-05-01T03:07:53.201Z' + - styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash: + patched: '2020-05-01T03:07:53.201Z' diff --git a/package.json b/package.json index 8e79bcb..f3fd5d3 100644 --- a/package.json +++ b/package.json @@ -28,7 +28,9 @@ "storybook:start": "start-storybook -p 9009 -s public", "test": "jest", "ts": "ts-node -r dotenv/config -O '{ \"isolatedModules\": false, \"module\": \"commonjs\" }' ", - "type-check": "tsc -p tsconfig.production.json" + "type-check": "tsc -p tsconfig.production.json", + "snyk-protect": "snyk protect", + "prepare": "yarn run snyk-protect" }, "husky": { "hooks": { @@ -105,7 +107,8 @@ "semver": "^5.6.0", "styled-components": "^4.1.1", "styled-system": "^2.2.1", - "utility-types": "^3.6.1" + "utility-types": "^3.6.1", + "snyk": "^1.316.1" }, "devDependencies": { "@storybook/addon-actions": "^5.0.6", @@ -177,5 +180,6 @@ "caniuse-lite": "1.0.30000957", "eslint-plugin-react": "^7.12.4", "graphql": "14.2.1" - } + }, + "snyk": true }