diff --git a/.snyk b/.snyk new file mode 100644 index 0000000..86e3f4b --- /dev/null +++ b/.snyk @@ -0,0 +1,12 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:minimatch:20160620': + - gulp > vinyl-fs > glob-watcher > gaze > globule > minimatch: + patched: '2022-09-26T11:24:14.859Z' + - gulp > vinyl-fs > glob-watcher > gaze > globule > glob > minimatch: + patched: '2022-09-26T11:24:14.859Z' + - gulp > vinyl-fs > glob-stream > minimatch: + patched: '2022-09-26T11:24:14.859Z' diff --git a/package.json b/package.json index 179efe7..cbc4058 100644 --- a/package.json +++ b/package.json @@ -3,11 +3,12 @@ "version": "1.1.1", "description": "myApp: An Ionic project", "dependencies": { - "gulp": "^3.5.6", - "gulp-sass": "^2.0.4", + "gulp": "^4.0.0", + "gulp-sass": "^5.0.0", "gulp-concat": "^2.2.0", "gulp-minify-css": "^0.3.0", - "gulp-rename": "^1.2.0" + "gulp-rename": "^1.2.0", + "@snyk/protect": "latest" }, "devDependencies": { "bower": "^1.3.3", @@ -24,5 +25,10 @@ ], "cordovaPlatforms": [ "ios" - ] + ], + "scripts": { + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true } \ No newline at end of file