Skip to content

[Snyk] Security upgrade webpack from 1.14.0 to 2.2.0 #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
snyk-bot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade webpack from 1.14.0 to 2.2.0 #3

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
274 changes: 274 additions & 0 deletions benchmark/.snyk
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,274 @@
# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.21.5
ignore: {}
# patches apply the minimum changes required to fix a vulnerability
patch:
'npm:debug:20170905':
- babel-core > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-eslint > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-helpers > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-helpers > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > debug:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > debug:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > tar-pack > debug:
patched: '2021-08-04T19:39:05.116Z'
'npm:extend:20180424':
- babel-cli > chokidar > fsevents > node-pre-gyp > request > extend:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > extend:
patched: '2021-08-04T19:39:05.116Z'
'npm:hoek:20180212':
- babel-cli > chokidar > fsevents > node-pre-gyp > request > hawk > hoek:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > chokidar > fsevents > node-pre-gyp > request > hawk > boom > hoek:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > chokidar > fsevents > node-pre-gyp > request > hawk > sntp > hoek:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > hawk > hoek:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > chokidar > fsevents > node-pre-gyp > request > hawk > cryptiles > boom > hoek:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > hawk > boom > hoek:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > hawk > sntp > hoek:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > hawk > cryptiles > boom > hoek:
patched: '2021-08-04T19:39:05.116Z'
SNYK-JS-LODASH-567746:
- babel-core > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > lodash:
patched: '2021-08-04T19:39:05.116Z'
- benchmark > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-eslint > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-generator > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-eslint > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-generator > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-eslint > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-generator > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-helpers > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-register > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-react > babel-plugin-transform-react-jsx > babel-helper-builder-react-jsx > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-generator > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-helpers > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-plugin-transform-strict-mode > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-react > babel-plugin-transform-react-jsx > babel-helper-builder-react-jsx > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-generator > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-generator > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-helpers > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-helpers > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-generator > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-generator > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-helpers > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-helpers > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-helpers > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-helpers > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-helpers > babel-template > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-helpers > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-helpers > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-helpers > babel-template > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > babel-types > lodash:
patched: '2021-08-04T19:39:05.116Z'
'npm:ms:20170412':
- babel-core > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-eslint > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-helpers > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-preset-node6 > babel-plugin-transform-es2015-modules-commonjs > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-core > babel-helpers > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-core > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > babel-register > babel-core > babel-helpers > babel-template > babel-traverse > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- babel-cli > chokidar > fsevents > node-pre-gyp > tar-pack > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > tar-pack > debug > ms:
patched: '2021-08-04T19:39:05.116Z'
'npm:qs:20170213':
- babel-cli > chokidar > fsevents > node-pre-gyp > request > qs:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > qs:
patched: '2021-08-04T19:39:05.116Z'
'npm:stringstream:20180511':
- babel-cli > chokidar > fsevents > node-pre-gyp > request > stringstream:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > stringstream:
patched: '2021-08-04T19:39:05.116Z'
'npm:tough-cookie:20170905':
- babel-cli > chokidar > fsevents > node-pre-gyp > request > tough-cookie:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > tough-cookie:
patched: '2021-08-04T19:39:05.116Z'
'npm:tunnel-agent:20170305':
- babel-cli > chokidar > fsevents > node-pre-gyp > request > tunnel-agent:
patched: '2021-08-04T19:39:05.116Z'
- webpack > watchpack > chokidar > fsevents > node-pre-gyp > request > tunnel-agent:
patched: '2021-08-04T19:39:05.116Z'
10 changes: 8 additions & 2 deletions benchmark/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,9 @@
"bench:static": "babel-node static",
"bench:dynamic": "babel-node dynamic",
"bench": "npm run bench:dynamic && npm run bench:static",
"bundle": "babel-node size"
"bundle": "babel-node size",
"prepare": "yarn run snyk-protect",
"snyk-protect": "snyk-protect"
},
"devDependencies": {
"babel": "^6.5.2",
Expand All @@ -15,6 +17,10 @@
"babel-preset-react": "^6.16.0",
"beautify-benchmark": "^0.2.4",
"benchmark": "^2.1.2",
"webpack": "^1.14.0"
"webpack": "^2.2.0"
},
"snyk": true,
"dependencies": {
"@snyk/protect": "latest"
}
}
Loading