diff --git a/Example/.snyk b/Example/.snyk new file mode 100644 index 00000000..2aa0227b --- /dev/null +++ b/Example/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.22.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - react-native > @react-native-community/cli > metro > metro-config > metro > metro-react-native-babel-preset > @babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash: + patched: '2022-04-08T03:11:14.564Z' diff --git a/Example/package.json b/Example/package.json index c444c38d..ac02d4ec 100644 --- a/Example/package.json +++ b/Example/package.json @@ -11,13 +11,16 @@ "test": "jest", "test:windows": "yarn jest --setupFiles=./jest-setups/jest.setup.windows.js", "lint": "eslint .", - "postinstall": "node ../scripts/examples_postinstall.js" + "postinstall": "node ../scripts/examples_postinstall.js", + "prepare": "yarn run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { "react": "16.11.0", "react-native": "0.62.2", "react-native-config": "../", - "react-native-windows": "^0.62.0-0" + "react-native-windows": "^0.62.0-0", + "@snyk/protect": "latest" }, "devDependencies": { "@babel/core": "^7.6.2", @@ -34,5 +37,6 @@ }, "jest": { "preset": "react-native" - } + }, + "snyk": true } diff --git a/Example/yarn.lock b/Example/yarn.lock index 326a85ae..c4daa32a 100644 --- a/Example/yarn.lock +++ b/Example/yarn.lock @@ -1879,6 +1879,11 @@ resolved "https://registry.yarnpkg.com/@sindresorhus/is/-/is-3.1.2.tgz#548650de521b344e3781fbdb0ece4aa6f729afb8" integrity sha512-JiX9vxoKMmu8Y3Zr2RVathBL1Cdu4Nt4MuNWemt1Nc06A0RAin9c5FArkhGsyMBWfCu4zj+9b+GxtjAnE4qqLQ== +"@snyk/protect@^1.898.0": + version "1.898.0" + resolved "https://registry.yarnpkg.com/@snyk/protect/-/protect-1.898.0.tgz#2a10cf07f019064e4c9e5ea172fc5a0a72bc5196" + integrity sha512-v4G6UD3hrLhV2DeBnmNg927PyDkKGAN0m4xJgi75dtgbT2dCXB45sjQNd0h+eSMidbwoa+z+m7NOaXMcoixp4Q== + "@szmarczak/http-timer@^4.0.5": version "4.0.5" resolved "https://registry.yarnpkg.com/@szmarczak/http-timer/-/http-timer-4.0.5.tgz#bfbd50211e9dfa51ba07da58a14cdfd333205152" @@ -8236,7 +8241,7 @@ react-is@^16.12.0, react-is@^16.8.1, react-is@^16.8.4, react-is@^16.8.6: integrity sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ== react-native-config@../: - version "1.4.2" + version "0.0.0" react-native-windows@^0.62.0-0: version "0.62.9"