Snyk's wizard will:

• Enumerate your local dependencies and query Snyk's servers for vulnerabilities
• Guide you through fixing found vulnerabilities
• Create a .snyk policy file to guide snyk commands such as test and protect
• Remember your dependencies to alert you when new vulnerabilities are disclosed

Querying vulnerabilities database...

License issues are not supported by the wizard, use snyk ignore

Tested 380 dependencies for known vulnerabilities, found 4 vulnerabilities, 27 vulnerable paths.

• Low severity vuln found in [email protected], introduced via [email protected]

• desc: Regular Expression Denial of Service (ReDoS)
• info: https://snyk.io/vuln/npm:debug:20170905
• from: [email protected] > [email protected] > [email protected]

Remediation options (Use arrow keys)

1. ❯ Re-install [email protected] (triggers upgrade to [email protected])
2. Patch (modifies files locally, updates policy for snyk protect runs)
3. Set to ignore for 30 days (updates policy)
4. Skip

This should be good to go. Thanks @gokaygurcan and @kylemh for your help with this. Sorry about the delay.

@kylemh @sethbergman Why is this still open, is there a reason?

The PR that's open for this doesn't work, and it should. I was having a back-n-forth email conversation with people @ Snyk, but wasn't able to resolve the issue.

Dependency security issues tracked via Greenkeeper in new repo