fix: Change lodash to node-noop for no vuln (#161)

quinnturner · web-flow · commit 041cec64ef07 · 2020-07-02T12:23:06.000-04:00
* fix: Change lodash to node-noop for no vuln

* fix: Add 1523 path allowlists for lodash
diff --git a/audit-ci.json b/audit-ci.json
@@ -1,4 +1,9 @@
 {
   "low": true,
-  "allowlist": []
+  "allowlist": [
+    "1523|eslint>inquirer>lodash",
+    "1523|eslint>lodash",
+    "1523|eslint>table>lodash",
+    "1523|mocha>yargs-unparser>lodash"
+  ]
 }
diff --git a/test/npm-none/package-lock.json b/test/npm-none/package-lock.json
diff --git a/test/npm-none/package.json b/test/npm-none/package.json
@@ -2,6 +2,6 @@
   "name": "audit-ci-npm-no-vulnerability",
   "description": "Test package.json with low vulnerability",
   "dependencies": {
-    "lodash": "4.17.11"
+    "node-noop": "1.0.0"
   }
 }
diff --git a/test/yarn-none/package.json b/test/yarn-none/package.json
@@ -2,6 +2,6 @@
   "name": "audit-ci-yarn-no-vulnerability",
   "description": "Test package.json with no vulnerability",
   "dependencies": {
-    "lodash": "4.17.11"
+    "node-noop": "1.0.0"
   }
 }
diff --git a/test/yarn-none/yarn.lock b/test/yarn-none/yarn.lock
@@ -2,7 +2,7 @@
 # yarn lockfile v1
 
 
-lodash@4.17.11:
-  version "4.17.11"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
-  integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==
+node-noop@1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/node-noop/-/node-noop-1.0.0.tgz#47a3e7d80cffaa6458364bd22ed85cab3307be79"
+  integrity sha1-R6Pn2Az/qmRYNkvSLthcqzMHvnk=

Original file line number	Diff line number	Diff line change
`@@ -2,6 +2,6 @@`
`2`	`2`	`"name": "audit-ci-npm-no-vulnerability",`
`3`	`3`	`"description": "Test package.json with low vulnerability",`
`4`	`4`	`"dependencies": {`
`5`		`- "lodash": "4.17.11"`
	`5`	`+ "node-noop": "1.0.0"`
`6`	`6`	`}`
`7`	`7`	`}`
Original file line number	Diff line number	Diff line change
`@@ -2,6 +2,6 @@`
`2`	`2`	`"name": "audit-ci-yarn-no-vulnerability",`
`3`	`3`	`"description": "Test package.json with no vulnerability",`
`4`	`4`	`"dependencies": {`
`5`		`- "lodash": "4.17.11"`
	`5`	`+ "node-noop": "1.0.0"`
`6`	`6`	`}`
`7`	`7`	`}`