Merge pull request #1 from riccardomerlin/snyk-fix-0ce5491177ee51313d…

…02e1ede31f8bcf

.snyk

@@ -0,0 +1,14 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.19.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:extend:20180424':
+    - request > extend:
+        patched: '2021-03-10T21:00:47.183Z'
+  'npm:stringstream:20180511':
+    - request > stringstream:
+        patched: '2021-03-10T21:00:47.183Z'
+  'npm:tough-cookie:20170905':
+    - request > tough-cookie:
+        patched: '2021-03-10T21:00:47.183Z'

package.json

@@ -5,7 +5,9 @@
   "main": "index.js",
   "scripts": {
     "test": "jest",
-    "start": "node src/index.js"
+    "start": "node src/index.js",
+    "snyk-protect": "snyk protect",
+    "prepare": "yarn run snyk-protect"
   },
   "keywords": [
     "kbot",
@@ -20,15 +22,17 @@
   "author": "Riccardo Merlin",
   "license": "ISC",
   "dependencies": {
-    "body-parser": "1.16.0",
+    "body-parser": "1.18.2",
     "es6-promise": "4.0.5",
-    "express": "4.14.0",
-    "helmet": "3.4.0",
-    "moment": "2.17.1",
+    "express": "4.16.0",
+    "helmet": "3.21.1",
+    "moment": "2.19.3",
     "nedb": "1.8.0",
-    "request": "2.79.0"
+    "request": "2.82.0",
+    "snyk": "^1.483.0"
   },
   "devDependencies": {
     "jest": "20.0.4"
-  }
+  },
+  "snyk": true
 }