From 3530d683981e6e40e2ce7e67557df0b189f7d24d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 26 Apr 2023 19:00:41 +0000 Subject: [PATCH] fix: node_modules/currently-unhandled/package.json & node_modules/currently-unhandled/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-584908 - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-DOTPROP-543489 - https://snyk.io/vuln/SNYK-JS-ENGINEIO-1056749 - https://snyk.io/vuln/SNYK-JS-ENGINEIO-3136336 - https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905 - https://snyk.io/vuln/SNYK-JS-GOT-2932019 - https://snyk.io/vuln/SNYK-JS-HAWK-2808852 - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-KARMA-2395349 - https://snyk.io/vuln/SNYK-JS-KARMA-2396325 - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 - https://snyk.io/vuln/SNYK-JS-LODASH-450202 - https://snyk.io/vuln/SNYK-JS-LODASH-567746 - https://snyk.io/vuln/SNYK-JS-LODASH-608086 - https://snyk.io/vuln/SNYK-JS-LODASH-73638 - https://snyk.io/vuln/SNYK-JS-LODASH-73639 - https://snyk.io/vuln/SNYK-JS-LOG4JS-2348757 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-1019388 - https://snyk.io/vuln/SNYK-JS-MINIMATCH-3050818 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-MOCHA-2863123 - https://snyk.io/vuln/SNYK-JS-MOCHA-561476 - https://snyk.io/vuln/SNYK-JS-SOCKETIO-1024859 - https://snyk.io/vuln/SNYK-JS-SOCKETIOPARSER-1056752 - https://snyk.io/vuln/SNYK-JS-SOCKETIOPARSER-3091012 - https://snyk.io/vuln/SNYK-JS-TRIMNEWLINES-1298042 - https://snyk.io/vuln/SNYK-JS-WS-1296835 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:braces:20180219 - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:eslint:20180222 - https://snyk.io/vuln/npm:growl:20160721 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:lodash:20180130 - https://snyk.io/vuln/npm:minimatch:20160620 - https://snyk.io/vuln/npm:ms:20170412 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:debug:20170905 - https://snyk.io/vuln/npm:ms:20170412 --- node_modules/currently-unhandled/.snyk | 11 ++++++++ node_modules/currently-unhandled/package.json | 26 +++++++++++-------- 2 files changed, 26 insertions(+), 11 deletions(-) create mode 100644 node_modules/currently-unhandled/.snyk diff --git a/node_modules/currently-unhandled/.snyk b/node_modules/currently-unhandled/.snyk new file mode 100644 index 0000000000..aa9b11a05f --- /dev/null +++ b/node_modules/currently-unhandled/.snyk @@ -0,0 +1,11 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - karma > socket.io > socket.io-adapter > socket.io-parser > debug: + patched: '2023-04-26T19:00:34.838Z' + 'npm:ms:20170412': + - karma > socket.io > socket.io-adapter > socket.io-parser > debug > ms: + patched: '2023-04-26T19:00:34.838Z' diff --git a/node_modules/currently-unhandled/package.json b/node_modules/currently-unhandled/package.json index 99380249b1..1c99cbf85c 100644 --- a/node_modules/currently-unhandled/package.json +++ b/node_modules/currently-unhandled/package.json @@ -13,7 +13,9 @@ "node": ">=0.10.0" }, "scripts": { - "test": "xo && nyc ava" + "test": "xo && nyc ava", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "files": [ "index.js", @@ -27,24 +29,25 @@ "promises" ], "dependencies": { - "array-find-index": "^1.0.1" + "array-find-index": "^1.0.1", + "@snyk/protect": "latest" }, "devDependencies": { - "ava": "^0.15.1", + "ava": "^4.0.0", "bluebird": "^3.4.0", "browserify": "^13.0.1", - "coveralls": "^2.11.9", + "coveralls": "^3.0.0", "delay": "^1.3.1", "is-ci": "^1.0.8", - "karma": "^0.13.22", + "karma": "^6.3.16", "karma-browserify": "^5.0.5", "karma-chrome-launcher": "^1.0.1", "karma-firefox-launcher": "^1.0.0", - "karma-mocha": "^1.0.1", - "mocha": "^2.5.3", - "nyc": "^6.4.0", - "watchify": "^3.7.0", - "xo": "^0.15.0" + "karma-mocha": "^2.0.0", + "mocha": "^10.1.0", + "nyc": "^14.0.0", + "watchify": "^4.0.0", + "xo": "^0.40.3" }, "browser": { "./index.js": "./browser.js" @@ -67,5 +70,6 @@ "mocha", "node" ] - } + }, + "snyk": true } \ No newline at end of file