From 44b58e5b2be1c32a413563cc855961d34e5c18e8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 23 Jun 2023 23:47:42 +0000 Subject: [PATCH] fix: node_modules/uri-js/package.json & node_modules/uri-js/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- node_modules/uri-js/.snyk | 10 ++++++++++ node_modules/uri-js/package.json | 10 +++++++--- 2 files changed, 17 insertions(+), 3 deletions(-) create mode 100644 node_modules/uri-js/.snyk mode change 100755 => 100644 node_modules/uri-js/package.json diff --git a/node_modules/uri-js/.snyk b/node_modules/uri-js/.snyk new file mode 100644 index 0000000000..330f5ebb26 --- /dev/null +++ b/node_modules/uri-js/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - babel-cli > lodash: + patched: '2023-06-23T23:47:40.142Z' + id: SNYK-JS-LODASH-567746 + path: babel-cli > lodash diff --git a/node_modules/uri-js/package.json b/node_modules/uri-js/package.json old mode 100755 new mode 100644 index 6ad0dc62f9..6817918de9 --- a/node_modules/uri-js/package.json +++ b/node_modules/uri-js/package.json @@ -22,7 +22,9 @@ "build:es5:min": "uglifyjs dist/es5/uri.all.js --support-ie8 --output dist/es5/uri.all.min.js --in-source-map dist/es5/uri.all.js.map --source-map uri.all.min.js.map --comments --compress --mangle --pure-funcs merge subexp && mv uri.all.min.js.map dist/es5/ && cp dist/es5/uri.all.d.ts dist/es5/uri.all.min.d.ts", "build": "npm run build:esnext && npm run build:es5 && npm run build:es5:min", "clean": "rm -rf dist", - "test": "mocha -u mocha-qunit-ui dist/es5/uri.all.js tests/tests.js" + "test": "mocha -u mocha-qunit-ui dist/es5/uri.all.js tests/tests.js", + "prepare": "yarn run snyk-protect", + "snyk-protect": "snyk-protect" }, "repository": { "type": "git", @@ -72,6 +74,8 @@ "uglify-js": "^2.8.14" }, "dependencies": { - "punycode": "^2.1.0" - } + "punycode": "^2.1.0", + "@snyk/protect": "latest" + }, + "snyk": true } \ No newline at end of file