From 4e7a8d8f6281c63e6af6820e4e1199f9c6f5e9e8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 26 Apr 2023 04:21:11 +0000 Subject: [PATCH] fix: node_modules/mkdirp/package.json & node_modules/mkdirp/.snyk to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908 - https://snyk.io/vuln/SNYK-JS-HAWK-2808852 - https://snyk.io/vuln/SNYK-JS-JSYAML-173999 - https://snyk.io/vuln/SNYK-JS-JSYAML-174129 - https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795 - https://snyk.io/vuln/SNYK-JS-MINIMIST-559764 - https://snyk.io/vuln/SNYK-JS-YARGSPARSER-560381 - https://snyk.io/vuln/npm:braces:20180219 - https://snyk.io/vuln/npm:hoek:20180212 - https://snyk.io/vuln/npm:tunnel-agent:20170305 The following vulnerabilities are fixed with a Snyk patch: - https://snyk.io/vuln/npm:hawk:20160119 - https://snyk.io/vuln/npm:http-signature:20150122 - https://snyk.io/vuln/npm:mime:20170907 - https://snyk.io/vuln/npm:request:20160119 - https://snyk.io/vuln/npm:tunnel-agent:20170305 --- node_modules/mkdirp/.snyk | 20 ++++++++++++++++++++ node_modules/mkdirp/package.json | 12 ++++++++---- 2 files changed, 28 insertions(+), 4 deletions(-) create mode 100644 node_modules/mkdirp/.snyk diff --git a/node_modules/mkdirp/.snyk b/node_modules/mkdirp/.snyk new file mode 100644 index 0000000000..411d3dcf1e --- /dev/null +++ b/node_modules/mkdirp/.snyk @@ -0,0 +1,20 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:hawk:20160119': + - tap > codecov.io > request > hawk: + patched: '2023-04-26T04:21:04.728Z' + 'npm:http-signature:20150122': + - tap > codecov.io > request > http-signature: + patched: '2023-04-26T04:21:04.728Z' + 'npm:mime:20170907': + - tap > codecov.io > request > form-data > mime: + patched: '2023-04-26T04:21:04.728Z' + 'npm:request:20160119': + - tap > codecov.io > request: + patched: '2023-04-26T04:21:04.728Z' + 'npm:tunnel-agent:20170305': + - tap > codecov.io > request > tunnel-agent: + patched: '2023-04-26T04:21:04.728Z' diff --git a/node_modules/mkdirp/package.json b/node_modules/mkdirp/package.json index b335f1ae0e..2e05ca63ad 100644 --- a/node_modules/mkdirp/package.json +++ b/node_modules/mkdirp/package.json @@ -16,19 +16,23 @@ "url": "https://github.com/substack/node-mkdirp.git" }, "scripts": { - "test": "tap test/*.js" + "test": "tap test/*.js", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { - "minimist": "^1.2.5" + "minimist": "^1.2.5", + "@snyk/protect": "latest" }, "devDependencies": { "mock-fs": "^3.7.0", - "tap": "^5.4.2" + "tap": "^14.6.8" }, "bin": "bin/cmd.js", "license": "MIT", "files": [ "bin", "index.js" - ] + ], + "snyk": true } \ No newline at end of file