diff --git a/demo/.snyk b/demo/.snyk new file mode 100644 index 0000000..ffd258a --- /dev/null +++ b/demo/.snyk @@ -0,0 +1,82 @@ +# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities. +version: v1.25.1 +ignore: {} +# patches apply the minimum changes required to fix a vulnerability +patch: + SNYK-JS-LODASH-567746: + - truffle-hdwallet-provider-privkey > web3-provider-engine > async > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > async > + lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babel-preset-env > babel-plugin-transform-es2015-block-scoping > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babel-preset-env > + babel-plugin-transform-es2015-block-scoping > lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babelify > babel-core > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babelify > babel-core > lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babel-preset-env > babel-plugin-transform-es2015-classes > babel-helper-define-map > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babel-preset-env > + babel-plugin-transform-es2015-classes > babel-helper-define-map > + lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babel-preset-env > babel-plugin-transform-es2015-sticky-regex > babel-helper-regex > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babel-preset-env > + babel-plugin-transform-es2015-sticky-regex > babel-helper-regex > + lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babelify > babel-core > babel-generator > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babelify > babel-core > + babel-generator > lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babelify > babel-core > babel-register > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babelify > babel-core > + babel-register > lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babel-preset-env > babel-plugin-transform-async-to-generator > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-template > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babel-preset-env > + babel-plugin-transform-async-to-generator > + babel-helper-remap-async-to-generator > babel-helper-function-name > + babel-template > lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babel-preset-env > babel-plugin-transform-async-to-generator > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-helper-get-function-arity > babel-types > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babel-preset-env > + babel-plugin-transform-async-to-generator > + babel-helper-remap-async-to-generator > babel-helper-function-name > + babel-helper-get-function-arity > babel-types > lodash + - truffle-hdwallet-provider-privkey > web3-provider-engine > eth-block-tracker > json-rpc-engine > babel-preset-env > babel-plugin-transform-async-to-generator > babel-helper-remap-async-to-generator > babel-helper-function-name > babel-template > babel-traverse > lodash: + patched: '2024-10-02T20:47:46.851Z' + id: SNYK-JS-LODASH-567746 + path: >- + truffle-hdwallet-provider-privkey > web3-provider-engine > + eth-block-tracker > json-rpc-engine > babel-preset-env > + babel-plugin-transform-async-to-generator > + babel-helper-remap-async-to-generator > babel-helper-function-name > + babel-template > babel-traverse > lodash diff --git a/demo/package.json b/demo/package.json index a40d9b3..35d86eb 100644 --- a/demo/package.json +++ b/demo/package.json @@ -1,6 +1,12 @@ { "dependencies": { "truffle": "5.0.35", - "truffle-hdwallet-provider-privkey": "^0.3.0" - } + "truffle-hdwallet-provider-privkey": "^0.3.0", + "@snyk/protect": "latest" + }, + "scripts": { + "prepare": "yarn run snyk-protect", + "snyk-protect": "snyk-protect" + }, + "snyk": true } diff --git a/demo/yarn.lock b/demo/yarn.lock index 8bcfc13..9ce34a4 100644 --- a/demo/yarn.lock +++ b/demo/yarn.lock @@ -2,6 +2,11 @@ # yarn lockfile v1 +"@snyk/protect@^1.1293.1": + version "1.1293.1" + resolved "https://registry.yarnpkg.com/@snyk/protect/-/protect-1.1293.1.tgz#2fb02c26732a8500d3400379524fe708e660c0ad" + integrity sha512-PT2lleyaQU+AvWmnPJ3yKWNyj7JnPUZvOrVTRfXpmmPfjx+U2k3jzsk8EDj0BJd9+goTsTyeQVGCPPSqE5MQtQ== + abstract-leveldown@~2.6.0: version "2.6.3" resolved "https://registry.yarnpkg.com/abstract-leveldown/-/abstract-leveldown-2.6.3.tgz#1c5e8c6a5ef965ae8c35dfb3a8770c476b82c4b8" @@ -65,7 +70,7 @@ async-eventemitter@^0.2.2: dependencies: async "^2.4.0" -"async-eventemitter@github:ahultgren/async-eventemitter#fa06e39e56786ba541c180061dbf2c0a5bbf951c": +async-eventemitter@ahultgren/async-eventemitter#fa06e39e56786ba541c180061dbf2c0a5bbf951c: version "0.2.3" resolved "https://codeload.github.com/ahultgren/async-eventemitter/tar.gz/fa06e39e56786ba541c180061dbf2c0a5bbf951c" dependencies: