Merge pull request #188 from morkro/snyk-fix-0f9ac244ab198c318ff7ff234d5aa177

[Snyk] Fix for 1 vulnerable dependencies

.snyk

@@ -0,0 +1,28 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-450202:
+    - stylelint > postcss-jsx > @babel/core > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > table > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > postcss-reporter > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - lint-staged > yup > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - lint-staged > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > postcss-jsx > @babel/core > @babel/types > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > postcss-jsx > @babel/core > @babel/traverse > @babel/generator > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > postcss-jsx > @babel/core > @babel/helpers > @babel/template > @babel/types > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > postcss-jsx > @babel/core > @babel/helpers > @babel/traverse > @babel/generator > @babel/types > lodash:
+        patched: '2019-07-04T06:01:27.964Z'
+    - stylelint > postcss-jsx > @babel/core > @babel/helpers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
+        patched: '2019-07-04T06:01:27.964Z'

package.json

@@ -9,7 +9,9 @@
     "test:unit": "vue-cli-service test:unit",
     "svg": "vsvg -s ./src/assets/svg -t ./src/assets/icons",
     "admin": "node bin/admin-yml",
-    "data": "node bin/xlsx-data"
+    "data": "node bin/xlsx-data",
+    "snyk-protect": "snyk protect",
+    "prepare": "npm run snyk-protect"
   },
   "dependencies": {
     "@sentry/browser": "^5.3.0",
@@ -27,7 +29,8 @@
     "vue-markdown": "^2.2.4",
     "vue-router": "^3.0.3",
     "vue-svgicon": "^3.2.5",
-    "vuex": "^3.0.1"
+    "vuex": "^3.0.1",
+    "snyk": "^1.189.0"
   },
   "devDependencies": {
     "@vue/cli-plugin-babel": "^3.5.5",
@@ -69,5 +72,6 @@
       "npm run admin",
       "git add"
     ]
-  }
+  },
+  "snyk": true
 }