Merge pull request #4 from ops-sandy/snyk-fix-1bca619d

[Snyk] Fix for 35 vulnerable dependency paths

Author: Sandeep Sudheer

01-express-nodemon/app/.snyk

@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.10.2
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+ 'npm:uglify-js:20151024':
+ - jade > transformers > uglify-js:
+ patched: '2018-04-23T06:24:41.330Z'

01-express-nodemon/app/package.json

@@ -3,16 +3,20 @@
  "version": "0.0.0",
  "private": true,
  "scripts": {
- "start": "nodemon -L app/bin/www"
+ "start": "nodemon -L app/bin/www",
+ "snyk-protect": "snyk protect",
+ "prepublish": "npm run snyk-protect"
  },
  "dependencies": {
- "express": "~4.9.0",
- "body-parser": "~1.8.1",
+ "express": "~4.16.0",
+ "body-parser": "~1.17.1",
  "cookie-parser": "~1.3.3",
  "morgan": "~1.3.0",
- "serve-favicon": "~2.1.3",
- "debug": "~2.0.0",
+ "serve-favicon": "~2.4.5",
+ "debug": "~2.6.9",
  "hjs": "~0.0.6",
- "jade": "*"
- }
+ "jade": "*",
+ "snyk": "^1.73.0"
+ },
+ "snyk": true
 }