2018-09-24 08:27:53 +00:00
|
|
|
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
|
|
|
version: v1.12.0
|
2018-09-25 00:16:25 +00:00
|
|
|
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
|
|
|
ignore:
|
|
|
|
'npm:braces:20180219':
|
|
|
|
- '*':
|
|
|
|
reason: Patch/update unavailable
|
|
|
|
expires: 2018-12-31T00:00:00.000Z
|
2018-09-24 08:27:53 +00:00
|
|
|
# patches apply the minimum changes required to fix a vulnerability
|
|
|
|
patch:
|
|
|
|
'npm:lodash:20180130':
|
|
|
|
- hexo-autonofollow > cheerio > lodash:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
'npm:tunnel-agent:20170305':
|
|
|
|
- hexo-all-minifier > imagemin-gifsicle > gifsicle > bin-build > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-jpegtran > jpegtran-bin > bin-build > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-mozjpeg > mozjpeg > bin-build > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-optipng > optipng-bin > bin-build > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-gifsicle > gifsicle > bin-wrapper > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-jpegtran > jpegtran-bin > bin-wrapper > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-mozjpeg > mozjpeg > bin-wrapper > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-optipng > optipng-bin > bin-wrapper > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|
|
|
|
- hexo-all-minifier > imagemin-pngquant > pngquant-bin > bin-wrapper > download > caw > tunnel-agent:
|
|
|
|
patched: '2018-09-24T08:27:51.828Z'
|