chore(security): ignore vue-roaster vunerabilities for now

Signed-off-by: Jonathan <theflametrooper@gmail.com>

.travis.yml

@@ -32,11 +32,11 @@ jobs:
         - docker-compose build frontend # build frontend
         - docker-compose up -d frontend # start frontend
         - docker-compose exec frontend /bin/bash -c "cd app && yarn lint" # using eslint to check for formatting/linting issues
-        - docker-compose exec frontend /bin/bash -c "snyk test --dev" # scan for dependency/dev. dependency vunerabilities
+        - docker-compose exec frontend /bin/bash -c "cd app && snyk test --dev" # scan for dependency/dev. dependency vunerabilities
     - stage: backend
       script:
         - docker-compose up -d mongo # start mongo (users automatically setup)
         - docker-compose up -d redis # start redis
         - docker-compose build backend # build backend
         - docker-compose up -d backend # start backend
-        - docker-compose exec backend /bin/bash -c "snyk test --dev" # scan for dependency/dev. dependency vunerabilities
+        - docker-compose exec backend /bin/bash -c "cd app && snyk test --dev" # scan for dependency/dev. dependency vunerabilities

frontend/.snyk

@@ -0,0 +1,21 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.13.5
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  'npm:vue:20170401':
+    - vue-roaster > vue:
+        reason: temp
+        expires: '2019-09-04T02:07:16.079Z'
+  'npm:vue:20170829':
+    - vue-roaster > vue:
+        reason: temp
+        expires: '2019-09-04T02:07:16.079Z'
+  'npm:vue:20180222':
+    - vue-roaster > vue:
+        reason: temp
+        expires: '2019-09-04T02:07:16.079Z'
+  'npm:vue:20180802':
+    - vue-roaster > vue:
+        reason: temp
+        expires: '2019-09-04T02:07:16.079Z'
+patch: {}

frontend/package.json

@@ -1,55 +1,57 @@
 {
-	"name": "musare-frontend",
-	"version": "0.0.0",
-	"description": "A modern, open-source, collaborative music app https://musare.com",
-	"main": "main.js",
-	"author": "Musare Team",
-	"license": "GPL-3.0",
-	"repository": "https://github.com/Musare/MusareNode",
-	"scripts": {
-		"lint": "npx eslint . --ext .js,.vue",
-		"dev": "webpack-dev-server --config webpack.dev.js",
-		"prod": "webpack --config webpack.prod.js"
-	},
-	"devDependencies": {
-		"@babel/core": "^7.5.4",
-		"@babel/plugin-proposal-object-rest-spread": "^7.5.4",
-		"@babel/plugin-syntax-dynamic-import": "^7.2.0",
-		"@babel/plugin-transform-runtime": "^7.5.0",
-		"@babel/preset-env": "^7.5.4",
-		"babel-eslint": "^10.0.2",
-		"babel-loader": "^8.0.6",
-		"css-loader": "^3.0.0",
-		"eslint": "^6.1.0",
-		"eslint-config-prettier": "^6.0.0",
-		"eslint-loader": "^2.2.1",
-		"eslint-plugin-import": "^2.17.2",
-		"eslint-plugin-prettier": "^3.1.0",
-		"eslint-plugin-vue": "^5.2.3",
-		"fetch": "^1.1.0",
-		"node-sass": "^4.12.0",
-		"prettier": "1.18.2",
-		"sass-loader": "^7.1.0",
-		"vue-hot-reload-api": "^2.3.3",
-		"vue-html-loader": "^1.2.4",
-		"vue-style-loader": "^4.1.2",
-		"vue-template-compiler": "^2.6.10",
-		"webpack": "^4.35.3",
-		"webpack-cli": "^3.3.5",
-		"webpack-dev-server": "^3.7.2"
-	},
-	"dependencies": {
-		"@babel/runtime": "^7.5.4",
-		"chart.js": "^2.5.0",
-		"config": "^3.2.2",
-		"eslint-config-airbnb-base": "13.2.0",
-		"html-webpack-plugin": "^3.2.0",
-		"vue": "^2.6.10",
-		"vue-loader": "^15.7.0",
-		"vue-roaster": "^1.1.1",
-		"vue-router": "^3.0.7",
-		"vuex": "^3.1.1",
-		"webpack-md5-hash": "0.0.6",
-		"webpack-merge": "^4.2.1"
-	}
+  "name": "musare-frontend",
+  "version": "0.0.0",
+  "description": "A modern, open-source, collaborative music app https://musare.com",
+  "main": "main.js",
+  "author": "Musare Team",
+  "license": "GPL-3.0",
+  "repository": "https://github.com/Musare/MusareNode",
+  "scripts": {
+    "lint": "npx eslint . --ext .js,.vue",
+    "dev": "webpack-dev-server --config webpack.dev.js",
+    "prod": "webpack --config webpack.prod.js",
+    "test": "snyk test"
+  },
+  "devDependencies": {
+    "@babel/core": "^7.5.4",
+    "@babel/plugin-proposal-object-rest-spread": "^7.5.4",
+    "@babel/plugin-syntax-dynamic-import": "^7.2.0",
+    "@babel/plugin-transform-runtime": "^7.5.0",
+    "@babel/preset-env": "^7.5.4",
+    "babel-eslint": "^10.0.2",
+    "babel-loader": "^8.0.6",
+    "css-loader": "^3.0.0",
+    "eslint": "^6.1.0",
+    "eslint-config-prettier": "^6.0.0",
+    "eslint-loader": "^2.2.1",
+    "eslint-plugin-import": "^2.17.2",
+    "eslint-plugin-prettier": "^3.1.0",
+    "eslint-plugin-vue": "^5.2.3",
+    "fetch": "^1.1.0",
+    "node-sass": "^4.12.0",
+    "prettier": "1.18.2",
+    "sass-loader": "^7.1.0",
+    "snyk": "^1.208.0",
+    "vue-hot-reload-api": "^2.3.3",
+    "vue-html-loader": "^1.2.4",
+    "vue-style-loader": "^4.1.2",
+    "vue-template-compiler": "^2.6.10",
+    "webpack": "^4.35.3",
+    "webpack-cli": "^3.3.5",
+    "webpack-dev-server": "^3.7.2"
+  },
+  "dependencies": {
+    "@babel/runtime": "^7.5.4",
+    "chart.js": "^2.5.0",
+    "config": "^3.2.2",
+    "eslint-config-airbnb-base": "13.2.0",
+    "html-webpack-plugin": "^3.2.0",
+    "vue": "^2.6.10",
+    "vue-loader": "^15.7.0",
+    "vue-roaster": "^1.1.1",
+    "vue-router": "^3.0.7",
+    "vuex": "^3.1.1",
+    "webpack-md5-hash": "0.0.6",
+    "webpack-merge": "^4.2.1"
+  }
 }