From 88a698c2c89992903ba18d16eaabd2dd84490543 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 30 Mar 2022 16:41:00 +0000
Subject: [PATCH] fix: package.json, yarn.lock & .snyk to reduce
 vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
---
 .snyk        | 20 ++++++++++++++++++++
 package.json | 10 +++++++---
 yarn.lock    |  5 +++++
 3 files changed, 32 insertions(+), 3 deletions(-)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..d2ec107
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,20 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.22.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - '@babel/core > lodash':
+        patched: '2022-03-30T16:40:23.192Z'
+    - '@babel/core > @babel/helper-module-transforms > lodash':
+        patched: '2022-03-30T16:40:23.192Z'
+    - '@babel/core > @babel/helpers > @babel/traverse > lodash':
+        patched: '2022-03-30T16:40:23.192Z'
+    - '@babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > lodash':
+        patched: '2022-03-30T16:40:23.192Z'
+    - '@babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/types > lodash':
+        patched: '2022-03-30T16:40:23.192Z'
+    - '@babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash':
+        patched: '2022-03-30T16:40:23.192Z'
+    - '@babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash':
+        patched: '2022-03-30T16:40:23.192Z'
diff --git a/package.json b/package.json
index e9408e3..da497f1 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,9 @@
     "test:unit:update": "yarn test:unit --updateSnapshot",
     "test:vue": "NODE_ENV=test vue-cli-service html-validate --config .github/.vue-validate.json --max-warnings 0",
     "vue:serve": "yarn vue:start --open",
-    "vue:start": "vue-cli-service serve"
+    "vue:start": "vue-cli-service serve",
+    "prepare": "yarn run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "dependencies": {
     "@babel/core": "^7.12.3",
@@ -35,7 +37,8 @@
     "js-yaml-loader": "^1.2.2",
     "serialize-javascript": "^5.0.1",
     "vue": "^2.6.12",
-    "vue-router": "^3.4.9"
+    "vue-router": "^3.4.9",
+    "@snyk/protect": "latest"
   },
   "devDependencies": {
     "@percy/puppeteer": "^1.1.0",
@@ -176,5 +179,6 @@
       "eslint --fix",
       "git add"
     ]
-  }
+  },
+  "snyk": true
 }
diff --git a/yarn.lock b/yarn.lock
index f22cda5..89ad5d6 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1548,6 +1548,11 @@
   dependencies:
     "@sinonjs/commons" "^1.7.0"
 
+"@snyk/protect@^1.890.0":
+  version "1.890.0"
+  resolved "https://registry.yarnpkg.com/@snyk/protect/-/protect-1.890.0.tgz#1979d9533edecb90b6b501cd8734685044378735"
+  integrity sha512-xloJx6b1OROkP0wk+lQgc3nMNaR0QdxokqxwErIK0rBFT+FVNrXCySXOWUzr8mUHqvJBYa5/7o71h2mCAiAvCQ==
+
 "@soda/friendly-errors-webpack-plugin@^1.7.1":
   version "1.7.1"
   resolved "https://registry.yarnpkg.com/@soda/friendly-errors-webpack-plugin/-/friendly-errors-webpack-plugin-1.7.1.tgz#706f64bcb4a8b9642b48ae3ace444c70334d615d"