diff --git a/babel-preset/.snyk b/babel-preset/.snyk new file mode 100644 index 00000000000000..365e369d8d0628 --- /dev/null +++ b/babel-preset/.snyk @@ -0,0 +1,26 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.14.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - '@babel/plugin-transform-block-scoping > lodash': + patched: '2020-04-30T22:39:50.183Z' + - metro-babel7-plugin-react-transform > lodash: + patched: '2020-04-30T22:39:50.183Z' + - '@babel/plugin-transform-unicode-regex > @babel/helper-regex > lodash': + patched: '2020-04-30T22:39:50.183Z' + - metro-babel7-plugin-react-transform > @babel/helper-module-imports > lodash: + patched: '2020-04-30T22:39:50.183Z' + - '@babel/plugin-transform-modules-commonjs > @babel/helper-module-transforms > @babel/helper-simple-access > lodash': + patched: '2020-04-30T22:39:50.183Z' + - metro-babel7-plugin-react-transform > @babel/helper-module-imports > @babel/types > lodash: + patched: '2020-04-30T22:39:50.183Z' + - '@babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > lodash': + patched: '2020-04-30T22:39:50.183Z' + - '@babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/generator > lodash': + patched: '2020-04-30T22:39:50.183Z' + - '@babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > lodash': + patched: '2020-04-30T22:39:50.183Z' + - '@babel/plugin-transform-exponentiation-operator > @babel/helper-builder-binary-assignment-operator-visitor > @babel/helper-explode-assignable-expression > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash': + patched: '2020-04-30T22:39:50.183Z' diff --git a/babel-preset/package.json b/babel-preset/package.json index 77eaafb46f826d..b0d99ad68b94f9 100644 --- a/babel-preset/package.json +++ b/babel-preset/package.json @@ -41,6 +41,12 @@ "@babel/plugin-transform-template-literals": "7.0.0-beta.47", "@babel/plugin-transform-unicode-regex": "7.0.0-beta.47", "@babel/template": "7.0.0-beta.47", - "metro-babel7-plugin-react-transform": "^0.38.1" - } + "metro-babel7-plugin-react-transform": "^0.38.1", + "snyk": "^1.316.1" + }, + "scripts": { + "snyk-protect": "snyk protect", + "prepublish": "npm run snyk-protect" + }, + "snyk": true }