Skip to content

Commit

Permalink
enable node security check (nsp)
Browse files Browse the repository at this point in the history
  • Loading branch information
@vladimiry
vladimiry committed Feb 23, 2018
1 parent 0dd7121 commit cd9aa26
Show file tree
Hide file tree
Showing 2 changed files with 96 additions and 4 deletions.
7 changes: 5 additions & 2 deletions package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
"electron-builder:release:x64": "electron-builder -p onTagOrDraft --x64",
"electron-builder:release:x64:linux": "electron-builder -p onTagOrDraft --x64 --linux AppImage deb freebsd pacman rpm snap",
"dist": "npm-run-all app:dist electron-builder:dist",
"app:dist": "cross-env NODE_ENV=production npm-run-all lint test:electron:main app:clean app:compile app:assets test:e2e",
"app:dist": "cross-env NODE_ENV=production npm-run-all security-check lint test:electron:main app:clean app:compile app:assets test:e2e",
"app:clean": "rimraf ./app/",
"app:assets": "gulp copy:assets",
"app:compile:production": "NODE_ENV=production npm-run-all electron:compile web:compile",
Expand All @@ -46,7 +46,8 @@
"lint:ts": "tslint \"./src/**/*.ts\"",
"lint:sass": "sass-lint -v -q -c sass-lint.yml",
"test:e2e": "ava-ts --verbose \"./src/e2e/**/*.{spec,test}.ts\"",
"test:electron:main": "ava-ts -p ./tsconfig.json --verbose \"./src/electron/main/**/*.{spec,test}.ts\""
"test:electron:main": "ava-ts -p ./tsconfig.json --verbose \"./src/electron/main/**/*.{spec,test}.ts\"",
"security-check": "nsp check --preprocessor yarn --reporter table"
},
"pre-commit": [
"lint"
Expand Down Expand Up @@ -135,6 +136,8 @@
"ngx-bootstrap": "2.0.2",
"node-sass": "4.7.2",
"npm-run-all": "4.1.2",
"nsp": "3.2.1",
"nsp-preprocessor-yarn": "1.0.1",
"otpauth": "3.1.3",
"postcss-custom-properties": "7.0.0",
"postcss-loader": "2.1.0",
Expand Down
93 changes: 91 additions & 2 deletions yarn.lock
View file
Original file line number Diff line number Diff line change
Expand Up @@ -247,6 +247,10 @@
"@types/uglify-js" "*"
source-map "^0.6.0"

"@yarnpkg/lockfile@^1.0.0":
version "1.0.0"
resolved "https://registry.yarnpkg.com/@yarnpkg/lockfile/-/lockfile-1.0.0.tgz#33d1dbb659a23b81f87f048762b35a446172add3"

abbrev@1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.1.tgz#f8f2c887ad10bf67f634f005b6987fed3179aac8"
Expand Down Expand Up @@ -302,6 +306,12 @@ adjust-sourcemap-loader@^1.1.0:
object-path "^0.9.2"
regex-parser "^2.2.1"

agent-base@^4.1.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/agent-base/-/agent-base-4.2.0.tgz#9838b5c3392b962bad031e6a4c5e1024abec45ce"
dependencies:
es6-promisify "^5.0.0"

ajv-keywords@^1.0.0:
version "1.5.1"
resolved "https://registry.yarnpkg.com/ajv-keywords/-/ajv-keywords-1.5.1.tgz#314dd0a4b3368fad3dfcdc54ede6171b886daf3c"
Expand Down Expand Up @@ -1767,6 +1777,15 @@ cli-spinners@^1.0.0, cli-spinners@^1.0.1:
version "1.1.0"
resolved "https://registry.yarnpkg.com/cli-spinners/-/cli-spinners-1.1.0.tgz#f1847b168844d917a671eb9d147e3df497c90d06"

cli-table2@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/cli-table2/-/cli-table2-0.2.0.tgz#2d1ef7f218a0e786e214540562d4bd177fe32d97"
dependencies:
lodash "^3.10.1"
string-width "^1.0.1"
optionalDependencies:
colors "^1.1.2"

cli-truncate@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/cli-truncate/-/cli-truncate-1.1.0.tgz#2b2dfd83c53cfd3572b87fc4d430a808afb04086"
Expand Down Expand Up @@ -2353,6 +2372,10 @@ [email protected]:
version "2.1.1"
resolved "https://registry.yarnpkg.com/custom-error-instance/-/custom-error-instance-2.1.1.tgz#3cf6391487a6629a6247eb0ca0ce00081b7e361a"

cvss@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/cvss/-/cvss-1.0.2.tgz#df67e92bf12a796f49e928799c8db3ba74b9fcd6"

cyclist@~0.2.2:
version "0.2.2"
resolved "https://registry.yarnpkg.com/cyclist/-/cyclist-0.2.2.tgz#1b33792e11e914a2fd6d6ed6447464444e5fa640"
Expand Down Expand Up @@ -3038,10 +3061,16 @@ es6-promise@^3.0.2:
version "3.3.1"
resolved "https://registry.yarnpkg.com/es6-promise/-/es6-promise-3.3.1.tgz#a08cdde84ccdbf34d027a1451bc91d4bcd28a613"

es6-promise@^4.0.5:
es6-promise@^4.0.3, es6-promise@^4.0.5:
version "4.2.4"
resolved "https://registry.yarnpkg.com/es6-promise/-/es6-promise-4.2.4.tgz#dc4221c2b16518760bd8c39a52d8f356fc00ed29"

es6-promisify@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/es6-promisify/-/es6-promisify-5.0.0.tgz#5109d62f3e56ea967c4b63505aef08291c8a5203"
dependencies:
es6-promise "^4.0.3"

es6-set@~0.1.5:
version "0.1.5"
resolved "https://registry.yarnpkg.com/es6-set/-/es6-set-0.1.5.tgz#d2b3ec5d4d800ced818db538d28974db0a73ccb1"
Expand Down Expand Up @@ -4397,6 +4426,13 @@ https-browserify@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/https-browserify/-/https-browserify-1.0.0.tgz#ec06c10e0a34c0f2faf199f7fd7fc78fffd03c73"

https-proxy-agent@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/https-proxy-agent/-/https-proxy-agent-2.1.1.tgz#a7ce4382a1ba8266ee848578778122d491260fd9"
dependencies:
agent-base "^4.1.0"
debug "^3.1.0"

hullabaloo-config-manager@^1.1.0:
version "1.1.1"
resolved "https://registry.yarnpkg.com/hullabaloo-config-manager/-/hullabaloo-config-manager-1.1.1.tgz#1d9117813129ad035fd9e8477eaf066911269fe3"
Expand Down Expand Up @@ -4543,7 +4579,7 @@ inquirer@^0.12.0:
strip-ansi "^3.0.0"
through "^2.3.6"

inquirer@~3.3.0:
inquirer@^3.3.0, inquirer@~3.3.0:
version "3.3.0"
resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-3.3.0.tgz#9dd2f2ad765dcab1ff0443b491442a20ba227dc9"
dependencies:
Expand Down Expand Up @@ -5561,6 +5597,10 @@ [email protected]:
lodash._baseiteratee "~4.7.0"
lodash._baseuniq "~4.6.0"

lodash@^3.10.1:
version "3.10.1"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"

lodash@^4.0.0, lodash@^4.14.0, lodash@^4.15.0, lodash@^4.17.2, lodash@^4.17.3, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.3.0, lodash@^4.8.0, lodash@~4.17.4:
version "4.17.5"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511"
Expand Down Expand Up @@ -6137,6 +6177,10 @@ [email protected]:
stdout-stream "^1.4.0"
"true-case-path" "^1.0.2"

nodesecurity-npm-utils@^6.0.0:
version "6.0.0"
resolved "https://registry.yarnpkg.com/nodesecurity-npm-utils/-/nodesecurity-npm-utils-6.0.0.tgz#5fb5974008c0c97a5c01844faa8fd3fc5520806c"

"nopt@2 || 3":
version "3.0.6"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-3.0.6.tgz#c6465dbf08abcd4db359317f79ac68a646b28ff9"
Expand Down Expand Up @@ -6211,6 +6255,26 @@ npm-run-path@^2.0.0:
gauge "~2.7.3"
set-blocking "~2.0.0"

[email protected]:
version "1.0.1"
resolved "https://registry.yarnpkg.com/nsp-preprocessor-yarn/-/nsp-preprocessor-yarn-1.0.1.tgz#c4660691935c3b140b243e254ab443abe157b14f"
dependencies:
"@yarnpkg/lockfile" "^1.0.0"

[email protected]:
version "3.2.1"
resolved "https://registry.yarnpkg.com/nsp/-/nsp-3.2.1.tgz#0f540f8e85851e4ad370b14d5001098046dedfd1"
dependencies:
chalk "^2.1.0"
cli-table2 "^0.2.0"
cvss "^1.0.2"
https-proxy-agent "^2.1.0"
inquirer "^3.3.0"
nodesecurity-npm-utils "^6.0.0"
semver "^5.4.1"
wreck "^12.5.1"
yargs "^9.0.1"

nth-check@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-1.0.1.tgz#9929acdf628fc2c41098deab82ac580cf149aae4"
Expand Down Expand Up @@ -9634,6 +9698,13 @@ wrappy@1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"

wreck@^12.5.1:
version "12.5.1"
resolved "https://registry.yarnpkg.com/wreck/-/wreck-12.5.1.tgz#cd2ffce167449e1f0242ed9cf80552e20fb6902a"
dependencies:
boom "5.x.x"
hoek "4.x.x"

write-file-atomic@^1.1.4:
version "1.3.4"
resolved "https://registry.yarnpkg.com/write-file-atomic/-/write-file-atomic-1.3.4.tgz#f807a4f0b1d9e913ae7a48112e6cc3af1991b45f"
Expand Down Expand Up @@ -9841,6 +9912,24 @@ yargs@^8.0.2:
y18n "^3.2.1"
yargs-parser "^7.0.0"

yargs@^9.0.1:
version "9.0.1"
resolved "https://registry.yarnpkg.com/yargs/-/yargs-9.0.1.tgz#52acc23feecac34042078ee78c0c007f5085db4c"
dependencies:
camelcase "^4.1.0"
cliui "^3.2.0"
decamelize "^1.1.1"
get-caller-file "^1.0.1"
os-locale "^2.0.0"
read-pkg-up "^2.0.0"
require-directory "^2.1.1"
require-main-filename "^1.0.1"
set-blocking "^2.0.0"
string-width "^2.0.0"
which-module "^2.0.0"
y18n "^3.2.1"
yargs-parser "^7.0.0"

yargs@~3.10.0:
version "3.10.0"
resolved "https://registry.yarnpkg.com/yargs/-/yargs-3.10.0.tgz#f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1"
Expand Down

0 comments on commit cd9aa26

Please sign in to comment.