diff --git a/examples/crna-kitchen-sink/.snyk b/examples/crna-kitchen-sink/.snyk new file mode 100644 index 000000000000..0ae3b136352b --- /dev/null +++ b/examples/crna-kitchen-sink/.snyk @@ -0,0 +1,52 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.13.3 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:debug:20170905': + - react-native > connect > body-parser > debug: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > connect-timeout > debug: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > express-session > debug: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > morgan > debug: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > serve-index > debug: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > serve-static > send > debug: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > compression > debug: + patched: '2019-04-11T02:33:40.871Z' + 'npm:lodash:20180130': + - react-native > plist > xmlbuilder > lodash: + patched: '2019-04-11T02:33:40.871Z' + 'npm:mime:20170907': + - react-native > connect > serve-static > send > mime: + patched: '2019-04-11T02:33:40.871Z' + 'npm:ms:20170412': + - react-native > connect > connect-timeout > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > morgan > debug > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > express-session > debug > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > compression > debug > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > serve-index > debug > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > body-parser > debug > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > connect-timeout > debug > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > serve-static > send > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > serve-static > send > debug > ms: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > serve-favicon > ms: + patched: '2019-04-11T02:33:40.871Z' + 'npm:negotiator:20160616': + - react-native > connect > compression > accepts > negotiator: + patched: '2019-04-11T02:33:40.871Z' + - react-native > connect > serve-index > accepts > negotiator: + patched: '2019-04-11T02:33:40.871Z' diff --git a/examples/crna-kitchen-sink/package.json b/examples/crna-kitchen-sink/package.json index 4c4f88991140..9ce1258d8fe0 100644 --- a/examples/crna-kitchen-sink/package.json +++ b/examples/crna-kitchen-sink/package.json @@ -27,7 +27,9 @@ "android": "react-native-scripts android", "ios": "react-native-scripts ios", "test": "node node_modules/jest/bin/jest.js --watch", - "storybook": "storybook start -p 7007" + "storybook": "storybook start -p 7007", + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" }, "jest": { "preset": "jest-expo" @@ -36,6 +38,8 @@ "expo": "^24.0.2", "prop-types": "^15.6.0", "react": "^16.2.0", - "react-native": "^0.51.0" - } + "react-native": "^0.59.0", + "snyk": "^1.150.0" + }, + "snyk": true }