2018-09-24 08:27:53 +00:00
|
|
|
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
|
2019-04-12 03:27:47 +00:00
|
|
|
version: v1.13.5
|
2018-09-25 00:16:25 +00:00
|
|
|
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
|
2019-08-11 01:36:16 +00:00
|
|
|
ignore:
|
2020-05-04 10:29:53 +00:00
|
|
|
SNYK-JS-MINIMIST-559764:
|
2019-10-17 03:52:09 +00:00
|
|
|
- '*':
|
2019-10-17 03:41:00 +00:00
|
|
|
reason: Update/patch unavailable
|
2020-02-20 18:50:21 +00:00
|
|
|
expires: '2020-06-30T00:00:00.000Z'
|
2020-05-04 10:29:53 +00:00
|
|
|
SNYK-JS-DOTPROP-543489:
|
2020-03-28 06:08:12 +00:00
|
|
|
- '*':
|
|
|
|
|
reason: Update/patch unavailable
|
|
|
|
|
expires: '2020-06-30T00:00:00.000Z'
|
2020-05-04 10:29:53 +00:00
|
|
|
SNYK-JS-YARGSPARSER-560381:
|
2020-03-28 06:08:12 +00:00
|
|
|
- '*':
|
|
|
|
|
reason: Update/patch unavailable
|
|
|
|
|
expires: '2020-06-30T00:00:00.000Z'
|
2020-05-05 06:02:15 +00:00
|
|
|
SNYK-JS-MARKDOWN-560793:
|
|
|
|
|
- '*':
|
|
|
|
|
reason: Update/patch unavailable
|
|
|
|
|
expires: '2020-06-30T00:00:00.000Z'
|
2019-10-17 03:41:00 +00:00
|
|
|
# patches apply the minimum changes required to fix a vulnerability
|
2020-05-04 10:29:53 +00:00
|
|
|
patch:
|
|
|
|
|
SNYK-JS-LODASH-567746:
|
|
|
|
|
- hexo > lodash:
|
|
|
|
|
patched: '2020-05-04T00:00:00.000Z'
|
2020-05-05 06:02:15 +00:00
|
|
|
renovate > lodash:
|
|
|
|
|
patched: '2020-05-04T00:00:00.000Z'
|
2020-05-15 08:14:44 +00:00
|
|
|
renovate > @snyk/ruby-semver > lodash:
|
|
|
|
|
patched: '2020-05-15T00:00:00.000Z'
|
