# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.7.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
  'npm:jwt-simple:20160804':
    - trailpack-twilio > twilio > jwt-simple:
        reason: None given
        expires: '2016-12-03T20:35:12.773Z'
  'npm:brace-expansion:20170302':
    - node-pre-gyp > rimraf > glob > minimatch > brace-expansion:
        reason: None given
        expires: '2017-07-17T07:40:05.133Z'
    - node-pre-gyp > tar > fstream > rimraf > glob > minimatch > brace-expansion:
        reason: None given
        expires: '2017-07-17T07:40:05.134Z'
    - node-pre-gyp > tar-pack > rimraf > glob > minimatch > brace-expansion:
        reason: None given
        expires: '2017-07-17T07:40:05.134Z'
    - node-pre-gyp > tar-pack > fstream > rimraf > glob > minimatch > brace-expansion:
        reason: None given
        expires: '2017-07-17T07:40:05.134Z'
    - node-pre-gyp > tar-pack > fstream-ignore > minimatch > brace-expansion:
        reason: None given
        expires: '2017-07-17T07:40:05.134Z'
    - node-pre-gyp > tar-pack > fstream-ignore > fstream > rimraf > glob > minimatch > brace-expansion:
        reason: None given
        expires: '2017-07-17T07:40:05.135Z'
    - node-pre-gyp > tar-pack > tar > fstream > rimraf > glob > minimatch > brace-expansion:
        reason: None given
        expires: '2017-07-17T07:40:05.135Z'
  'npm:qs:20170213':
    - '* > qs':
        reason: Vuln exists in dev dependency
        expires: '2017-07-17T07:35:57.866Z'
  'npm:debug:20170905':
    - trailpack-realtime > primus > setheader > debug:
        reason: None given
        expires: '2017-12-23T21:23:51.651Z'
    - trailpack-realtime > primus > access-control > setheader > debug:
        reason: None given
        expires: '2017-12-23T21:23:51.651Z'
  'npm:ws:20171108':
    - trailpack-realtime > engine.io > ws:
        reason: None given
        expires: '2017-12-23T21:23:51.651Z'
  'npm:moment:20170905':
    - trailpack-cron > cron > moment-timezone > moment:
        reason: None given
        expires: '2017-12-29T19:29:39.532Z'
    - trailpack-cron > cron-cluster > cron > moment-timezone > moment:
        reason: None given
        expires: '2017-12-29T19:29:39.532Z'
    - passport-jwt > jsonwebtoken > joi > moment:
        reason: None given
        expires: '2017-12-29T19:29:39.532Z'
    - trailpack-sequelize > sequelize > moment:
        reason: None given
        expires: '2017-12-29T19:29:39.532Z'
    - trailpack-sequelize > sequelize > moment-timezone > moment:
        reason: None given
        expires: '2017-12-29T19:29:39.532Z'
# patches apply the minimum changes required to fix a vulnerability
patch:
  'npm:ms:20170412':
    - node-pre-gyp > tar-pack > debug > ms:
        patched: '2017-06-17T07:35:57.866Z'
    - primus-rooms > debug > ms:
        patched: '2017-10-22T09:55:35.049Z'
    - trailpack-express > compression > debug > ms:
        patched: '2017-06-17T07:35:57.866Z'
    - trailpack-realtime > engine.io > debug > ms:
        patched: '2017-06-17T07:35:57.866Z'
    - trailpack-passport > jsonwebtoken > ms:
        patched: '2017-06-17T07:35:57.866Z'
    - trailpack-realtime > engine.io > debug > ms:
        patched: '2017-10-22T09:55:35.049Z'
  'npm:debug:20170905':
    - primus-rooms > debug:
        patched: '2017-10-01T08:00:10.258Z'
      lisa-standalone-voice-command > sonus > @google-cloud/speech > google-gax > grpc > node-pre-gyp > tar-pack > debug:
        patched: '2017-11-29T19:26:49.774Z'
    - trailpack-realtime > engine.io > debug:
        patched: '2017-10-01T08:00:10.258Z'
    - trailpack-realtime > engine.io > debug:
        patched: '2017-10-22T09:55:35.049Z'
    - primus-rooms > debug:
        patched: '2017-10-22T09:55:35.049Z'