|
1 | | -version: v1.5.2 |
2 | | -ignore: {} |
| 1 | +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. |
| 2 | +version: v1.7.1 |
| 3 | +# ignores vulnerabilities until expiry date; change duration by modifying expiry date |
| 4 | +ignore: |
| 5 | + 'npm:brace-expansion:20170302': |
| 6 | + - babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > rimraf > glob > minimatch > brace-expansion: |
| 7 | + reason: None given |
| 8 | + expires: '2017-07-11T17:36:01.710Z' |
| 9 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > tar-pack > rimraf > glob > minimatch > brace-expansion: |
| 10 | + reason: None given |
| 11 | + expires: '2017-07-11T17:36:01.712Z' |
| 12 | + - babel-cli > chokidar > fsevents > node-pre-gyp > rimraf > glob > minimatch > brace-expansion: |
| 13 | + reason: None given |
| 14 | + expires: '2017-07-11T17:36:01.719Z' |
| 15 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > rimraf > glob > minimatch > brace-expansion: |
| 16 | + reason: None given |
| 17 | + expires: '2017-07-11T17:36:01.721Z' |
| 18 | + - babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > tar > fstream > rimraf > glob > minimatch > brace-expansion: |
| 19 | + reason: None given |
| 20 | + expires: '2017-07-11T17:36:01.722Z' |
| 21 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > tar-pack > tar > fstream > rimraf > glob > minimatch > brace-expansion: |
| 22 | + reason: None given |
| 23 | + expires: '2017-07-11T17:36:01.725Z' |
| 24 | + - babel-cli > chokidar > fsevents > node-pre-gyp > tar > fstream > rimraf > glob > minimatch > brace-expansion: |
| 25 | + reason: None given |
| 26 | + expires: '2017-07-11T17:36:01.726Z' |
| 27 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > tar > fstream > rimraf > glob > minimatch > brace-expansion: |
| 28 | + reason: None given |
| 29 | + expires: '2017-07-11T17:36:01.727Z' |
| 30 | + - babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > fstream > rimraf > glob > minimatch > brace-expansion: |
| 31 | + reason: None given |
| 32 | + expires: '2017-07-11T17:36:01.728Z' |
| 33 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > tar-pack > fstream > rimraf > glob > minimatch > brace-expansion: |
| 34 | + reason: None given |
| 35 | + expires: '2017-07-11T17:36:01.730Z' |
| 36 | + - babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > fstream-ignore > fstream > rimraf > glob > minimatch > brace-expansion: |
| 37 | + reason: None given |
| 38 | + expires: '2017-07-11T17:36:01.731Z' |
| 39 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > tar-pack > fstream-ignore > fstream > rimraf > glob > minimatch > brace-expansion: |
| 40 | + reason: None given |
| 41 | + expires: '2017-07-11T17:36:01.732Z' |
| 42 | + - babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > fstream-ignore > minimatch > brace-expansion: |
| 43 | + reason: None given |
| 44 | + expires: '2017-07-11T17:36:01.734Z' |
| 45 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > tar-pack > fstream-ignore > minimatch > brace-expansion: |
| 46 | + reason: None given |
| 47 | + expires: '2017-07-11T17:36:01.737Z' |
| 48 | +# patches apply the minimum changes required to fix a vulnerability |
3 | 49 | patch: |
4 | 50 | 'npm:moment:20161019': |
5 | 51 | - express-brute-mongo > moment: |
6 | | - patched: '2016-11-18T11:48:06.051Z' |
| 52 | + patched: '2017-06-11T17:33:32.049Z' |
7 | 53 | 'npm:request:20160119': |
8 | 54 | - nodejs-dashboard > blessed-contrib > picture-tube > request: |
9 | 55 | patched: '2016-11-18T11:48:06.051Z' |
| 56 | + 'npm:ms:20170412': |
| 57 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > tar-pack > debug > ms: |
| 58 | + patched: '2017-06-11T17:33:32.049Z' |
| 59 | + - babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > debug > ms: |
| 60 | + patched: '2017-06-11T17:33:32.049Z' |
| 61 | + - api-query-params > ava > ms: |
| 62 | + patched: '2017-06-11T17:33:32.049Z' |
| 63 | + - bcrypt > node-pre-gyp > tar-pack > debug > ms: |
| 64 | + patched: '2017-06-11T17:33:32.049Z' |
| 65 | + 'npm:qs:20170213': |
| 66 | + - babel-cli > chokidar > fsevents > node-pre-gyp > request > qs: |
| 67 | + patched: '2017-06-11T17:33:32.049Z' |
| 68 | + - api-query-params > ava > chokidar > fsevents > node-pre-gyp > request > qs: |
| 69 | + patched: '2017-06-11T17:33:32.049Z' |
0 commit comments