diff --git a/packages/benchpress/.snyk b/packages/benchpress/.snyk new file mode 100644 index 000000000000..bcaf76ab97f2 --- /dev/null +++ b/packages/benchpress/.snyk @@ -0,0 +1,30 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - firefox-profile > archiver > lodash: + patched: '2020-05-01T01:27:00.502Z' + - firefox-profile > archiver > archiver-utils > lodash: + patched: '2020-05-01T01:27:00.502Z' + - firefox-profile > archiver > async > lodash: + patched: '2020-05-01T01:27:00.502Z' + - firefox-profile > archiver > zip-stream > lodash: + patched: '2020-05-01T01:27:00.502Z' + - jpm > firefox-profile > archiver > lodash: + patched: '2020-05-01T01:27:00.502Z' + - jpm > xml2js > xmlbuilder > lodash: + patched: '2020-05-01T01:27:00.502Z' + - firefox-profile > archiver > zip-stream > archiver-utils > lodash: + patched: '2020-05-01T01:27:00.502Z' + - jpm > firefox-profile > archiver > archiver-utils > lodash: + patched: '2020-05-01T01:27:00.502Z' + - jpm > firefox-profile > archiver > async > lodash: + patched: '2020-05-01T01:27:00.502Z' + - jpm > firefox-profile > archiver > zip-stream > lodash: + patched: '2020-05-01T01:27:00.502Z' + - jpm > firefox-profile > archiver > zip-stream > archiver-utils > lodash: + patched: '2020-05-01T01:27:00.502Z' + - jpm > sign-addon > request > form-data > async > lodash: + patched: '2020-05-01T01:27:00.502Z' diff --git a/packages/benchpress/package.json b/packages/benchpress/package.json index c9573333af12..8151c68b34d8 100644 --- a/packages/benchpress/package.json +++ b/packages/benchpress/package.json @@ -11,7 +11,8 @@ "rxjs": "^6.0.0", "jpm": "1.2.0", "firefox-profile": "0.4.0", - "selenium-webdriver": "^2.53.3" + "selenium-webdriver": "^2.53.3", + "snyk": "^1.316.1" }, "repository": { "type": "git", @@ -28,5 +29,10 @@ "bugs": { "url": "https://github.com/angular/angular/issues" }, - "homepage": "https://github.com/angular/angular/tree/master/packages/compiler-cli" + "homepage": "https://github.com/angular/angular/tree/master/packages/compiler-cli", + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }