[Snyk] Fix for 1 vulnerabilities (#23807)

* fix: package.json & .snyk to reduce vulnerabilities


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

* fix: package.json & .snyk to reduce vulnerabilities


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
This commit is contained in:
Snyk bot 2020-05-01 10:05:18 +03:00 committed by GitHub
parent 7d3cb95f17
commit 08dd4435df
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 23 additions and 4 deletions

16
.snyk Normal file
View File

@ -0,0 +1,16 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.14.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
SNYK-JS-LODASH-567746:
- lodash:
patched: '2020-05-01T06:50:59.565Z'
- '@ant-design/react-slick > lodash':
patched: '2020-05-01T06:50:59.565Z'
- rc-steps > lodash:
patched: '2020-05-01T06:50:59.565Z'
- rc-table > lodash:
patched: '2020-05-01T06:50:59.565Z'
- rc-tabs > lodash:
patched: '2020-05-01T06:50:59.565Z'

View File

@ -71,7 +71,7 @@
"prettier": "prettier -c --write '**/*'",
"pretty-quick": "pretty-quick",
"pub": "antd-tools run pub",
"prepublish": "antd-tools run guard",
"prepublish": "npm run snyk-protect && antd-tools run guard",
"site": "cross-env NODE_ICU_DATA=node_modules/full-icu concurrently \"bisheng build --ssr -c ./site/bisheng.config.js\" \"node ./scripts/generateColorLess.js\"",
"sort": "npx sort-package-json",
"sort-api": "antd-tools run sort-api-table",
@ -82,7 +82,8 @@
"test-all": "./scripts/test-all.sh",
"test-node": "jest --config .jest.node.js --no-cache",
"tsc": "tsc",
"site:test": "jest --config .jest.site.js --cache=false"
"site:test": "jest --config .jest.site.js --cache=false",
"snyk-protect": "snyk protect"
},
"husky": {
"hooks": {
@ -139,7 +140,8 @@
"rc-virtual-list": "^1.1.0",
"resize-observer-polyfill": "^1.5.1",
"scroll-into-view-if-needed": "^2.2.20",
"warning": "~4.0.3"
"warning": "~4.0.3",
"snyk": "^1.316.1"
},
"devDependencies": {
"@ant-design/bisheng-plugin": "^2.3.0",
@ -290,5 +292,6 @@
"tnpm": {
"mode": "npm"
},
"title": "Ant Design"
"title": "Ant Design",
"snyk": true
}