fix: frontend/package.json, frontend/yarn.lock & frontend/.snyk to reduce vulnerabilities (#310)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908
- https://snyk.io/vuln/SNYK-JS-AXIOS-1579269
- https://snyk.io/vuln/SNYK-JS-D3COLOR-1076592
- https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:debug:20170905
This commit is contained in:
Snyk bot 2021-09-28 14:55:41 +02:00 committed by GitHub
parent da653681cf
commit e756cefa75
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 634 additions and 750 deletions

8
frontend/.snyk Normal file
View File

@ -0,0 +1,8 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.22.1
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:debug:20170905':
- react-force-graph > 3d-force-graph-vr > aframe > debug:
patched: '2021-09-28T04:21:10.696Z'

View File

@ -10,7 +10,9 @@
"lint": "eslint . --debug",
"lint:fix": "eslint . --fix --debug",
"cypress:open": "cypress open",
"cypress:run": "cypress run"
"cypress:run": "cypress run",
"prepare": "yarn run snyk-protect",
"snyk-protect": "snyk-protect"
},
"engines": {
"node": ">=12.13.0"
@ -36,7 +38,7 @@
"@types/styled-components": "^5.1.4",
"@types/vis": "^4.21.21",
"antd": "^4.16.13",
"axios": "^0.21.0",
"axios": "^0.21.3",
"babel-eslint": "^10.1.0",
"babel-jest": "^26.6.0",
"babel-loader": "8.1.0",
@ -49,7 +51,7 @@
"chart.js": "^3.4.0",
"chartjs-adapter-date-fns": "^2.0.0",
"css-loader": "4.3.0",
"d3": "^6.2.0",
"d3": "^7.0.0",
"d3-flame-graph": "^3.1.1",
"d3-tip": "^0.9.1",
"dotenv": "8.2.0",
@ -106,9 +108,10 @@
"uuid": "^8.3.2",
"web-vitals": "^0.2.4",
"webpack": "^5.23.0",
"webpack-dev-server": "^3.11.2",
"webpack-dev-server": "^4.0.0",
"webpack-manifest-plugin": "2.2.0",
"workbox-webpack-plugin": "5.1.4"
"workbox-webpack-plugin": "5.1.4",
"@snyk/protect": "latest"
},
"browserslist": {
"production": [
@ -165,5 +168,6 @@
"react-hot-loader": "^4.13.0",
"react-is": "^17.0.1",
"webpack-cli": "^4.5.0"
}
},
"snyk": true
}

File diff suppressed because it is too large Load Diff