diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..3dc4a92 --- /dev/null +++ b/.snyk @@ -0,0 +1,10 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - recharts > lodash: + patched: '2022-09-28T04:20:06.967Z' + - recharts > react-smooth > lodash: + patched: '2022-09-28T04:20:06.967Z' diff --git a/package-lock.json b/package-lock.json index 1bfc5cb..dbd2e3b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1033,6 +1033,11 @@ "integrity": "sha512-shAmDyaQC4H92APFoIaVDHCx5bStIocgvbwQyxPRrbUY20V1EYTbSDchWbuwlMG3V17cprZhA6+78JfB+3DTPw==", "dev": true }, + "@snyk/protect": { + "version": "1.1013.0", + "resolved": "https://registry.npmjs.org/@snyk/protect/-/protect-1.1013.0.tgz", + "integrity": "sha512-w67p3tncQPJjhrdsLxcDh2PhJEcU2eRkYhZO6nbSZipGmznPovveFw24BTYRsefGPhiAMPP7gbjGVVRL1rTrdg==" + }, "@svgr/core": { "version": "2.4.1", "resolved": "https://registry.npmjs.org/@svgr/core/-/core-2.4.1.tgz", @@ -1073,19 +1078,6 @@ "resolved": "https://registry.npmjs.org/@types/classnames/-/classnames-2.2.6.tgz", "integrity": "sha512-XHcYvVdbtAxVstjKxuULYqYaWIzHR15yr1pZj4fnGChuBVJlIAp9StJna0ZJNSgxPh4Nac2FL4JM3M11Tm6fqQ==" }, - "@types/d3-path": { - "version": "1.0.8", - "resolved": "https://registry.npmjs.org/@types/d3-path/-/d3-path-1.0.8.tgz", - "integrity": "sha512-AZGHWslq/oApTAHu9+yH/Bnk63y9oFOMROtqPAtxl5uB6qm1x2lueWdVEjsjjV3Qc2+QfuzKIwIR5MvVBakfzA==" - }, - "@types/d3-shape": { - "version": "1.3.1", - "resolved": "https://registry.npmjs.org/@types/d3-shape/-/d3-shape-1.3.1.tgz", - "integrity": "sha512-usqdvUvPJ7AJNwpd2drOzRKs1ELie53p2m2GnPKr076/ADM579jVTJ5dPsoZ5E/CMNWk8lvPWYQSvilpp6jjwg==", - "requires": { - "@types/d3-path": "*" - } - }, "@types/enzyme": { "version": "3.1.15", "resolved": "https://registry.npmjs.org/@types/enzyme/-/enzyme-3.1.15.tgz", @@ -1208,20 +1200,6 @@ "@types/react": "*" } }, - "@types/recharts": { - "version": "file:https:/registry.npmjs.org/@types/recharts/-/recharts-1.1.2.tgz", - "integrity": "sha512-lriVDcpbbSjRK1n1rL41ZxgNhbxJAXZkSZAQ1M91IvNwlM2uc4W9Stevk9ODK1/lzgHpJjc/WJs6aN0s707fCQ==", - "requires": { - "@types/d3-shape": "*", - "@types/react": "*", - "@types/recharts-scale": "*" - } - }, - "@types/recharts-scale": { - "version": "1.0.0", - "resolved": "https://registry.npmjs.org/@types/recharts-scale/-/recharts-scale-1.0.0.tgz", - "integrity": "sha512-HR/PrCcxYb2YHviTqH7CMdL1TUhUZLTUKzfrkMhxm1HTa5mg/QtP8XMiuSPz6dZ6wecazAOu8aYZ5DqkNlgHHQ==" - }, "@types/recompose": { "version": "0.30.0", "resolved": "https://registry.npmjs.org/@types/recompose/-/recompose-0.30.0.tgz", @@ -10051,9 +10029,9 @@ } }, "lodash": { - "version": "4.17.11", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz", - "integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==" + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" }, "lodash._getnative": { "version": "3.9.1", diff --git a/package.json b/package.json index 140045f..dc0276b 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "@types/recharts": "file:@types/recharts", "babel-polyfill": "^6.26.0", "classnames": "^2.2.6", - "lodash": "^4.17.11", + "lodash": "^4.17.21", "rc-slider": "^8.6.3", "react": "^16.5.3", "react-dom": "^16.5.3", @@ -44,7 +44,8 @@ "recharts": "git+https://github.com/FUUbi/recharts.git#v1.4.2-patch.1", "recompose": "^0.30.0", "redux": "^4.0.1", - "reselect": "^4.0.0" + "reselect": "^4.0.0", + "@snyk/protect": "latest" }, "scripts": { "setup": "node ./setup/convert", @@ -53,12 +54,15 @@ "test": "react-scripts test --env=jsdom", "eject": "react-scripts eject", "predeploy": "npm run build", - "deploy": "gh-pages -d build" + "deploy": "gh-pages -d build", + "prepare": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "browserslist": [ ">0.2%", "not dead", "not ie <= 11", "not op_mini all" - ] + ], + "snyk": true }