diff --git a/nativeShop/.snyk b/nativeShop/.snyk new file mode 100644 index 0000000..eaa6127 --- /dev/null +++ b/nativeShop/.snyk @@ -0,0 +1,8 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.0 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + 'npm:lodash:20180130': + - react-native > plist > xmlbuilder > lodash: + patched: '2022-10-06T20:56:20.346Z' diff --git a/nativeShop/package.json b/nativeShop/package.json index cd3ec8c..1520fbd 100644 --- a/nativeShop/package.json +++ b/nativeShop/package.json @@ -4,12 +4,15 @@ "private": true, "scripts": { "start": "node node_modules/react-native/local-cli/cli.js start", - "test": "jest" + "test": "jest", + "prepublish": "npm run snyk-protect", + "snyk-protect": "snyk-protect" }, "dependencies": { - "react": "16.0.0-alpha.12", - "react-native": "0.46.4", - "react-navigation": "^1.0.0-beta.11" + "react": "16.5.0", + "react-native": "0.64.0", + "react-navigation": "^1.0.0-beta.11", + "@snyk/protect": "latest" }, "devDependencies": { "babel-jest": "20.0.3", @@ -19,5 +22,6 @@ }, "jest": { "preset": "react-native" - } + }, + "snyk": true }