Implemented Synk and patched a few vulnerability with express

simplyzee · May 4, 2016 · dad2dda · dad2dda
1 parent ddb4e6b
commit dad2dda
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 3 deletions.
diff --git a/.snyk b/.snyk
@@ -0,0 +1,8 @@
+patch:
+  'npm:uglify-js:20150824':
+    - jade > transformers > uglify-js:
+        patched: '2016-05-04T08:44:52.644Z'
+  'npm:uglify-js:20151024':
+    - jade > transformers > uglify-js:
+        patched: '2016-05-04T08:44:52.644Z'
+version: v1
diff --git a/package.json b/package.json
@@ -4,14 +4,16 @@
   "private": true,
   "scripts": {
     "start": "node bin/start >> logs/forever.log",
-    "test": "node_modules/.bin/istanbul test ./node_modules/mocha/bin/_mocha -- specs -R spec --recursive --timeout 1000"
+    "test": "snyk test && node_modules/.bin/istanbul test ./node_modules/mocha/bin/_mocha -- specs -R spec --recursive --timeout 1000",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "dependencies": {
     "body-parser": "~1.13.2",
     "bunyan": "^1.6.0",
     "cookie-parser": "~1.3.5",
     "debug": "~2.2.0",
-    "express": "~4.9.8",
+    "express": "^4.12.4",
     "forever-monitor": "^1.7.0",
     "helmet": "^1.1.0",
     "istanbul": "^0.4.2",
@@ -25,6 +27,8 @@
     "request": "^2.69.0",
     "serve-favicon": "~2.3.0",
     "should": "^8.2.2",
+    "snyk": "^1.14.2",
     "supertest": "^1.2.0"
-  }
+  },
+  "snyk": true
 }