From d1cff6c86bc74ad85c64fb0d6ab2e0dc0207344d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 1 May 2020 00:16:07 +0200
Subject: [PATCH 1/2] fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
---
 .snyk | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 .snyk

diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..05a0892
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - inquirer > lodash:
+        patched: '2020-04-30T22:16:05.549Z'
+    - replace-in-files > lodash:
+        patched: '2020-04-30T22:16:05.549Z'

From e346c1ec013e051504db479da9983a24eca2d0c2 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 1 May 2020 00:16:08 +0200
Subject: [PATCH 2/2] fix: .snyk & package.json to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
---
 package.json | 70 +++++++++++++++++++++++++++-------------------------
 1 file changed, 37 insertions(+), 33 deletions(-)

diff --git a/package.json b/package.json
index fd27067..9900fe5 100644
--- a/package.json
+++ b/package.json
@@ -1,35 +1,39 @@
 {
-	"name": "@tournant/communard",
-	"version": "2.2.0",
-	"description": "CLI helper to create new Tournant UI components",
-	"main": "src/scaffold.js",
-	"bin": {
-		"communard": "bin/scaffold"
-	},
-	"scripts": {
-		"test": "echo \"You would better write some tests, right?\""
-	},
-	"keywords": [
-		"cli",
-		"tournant"
-	],
-	"publishConfig": {
-		"access": "public"
-	},
-	"files": [
-		"bin/",
-		"src/"
-	],
-	"author": "Tournant <team@tournant.dev> (http://www.tournant.dev)",
-	"license": "MIT",
-	"dependencies": {
-		"arg": "^4.1.1",
-		"chalk": "^2.4.2",
-		"esm": "^3.2.25",
-		"execa": "^3.2.0",
-		"inquirer": "^7.1.0",
-		"ncp": "^2.0.0",
-		"replace-in-files": "^2.0.3",
-		"validate-npm-package-name": "^3.0.0"
-	}
+  "name": "@tournant/communard",
+  "version": "2.2.0",
+  "description": "CLI helper to create new Tournant UI components",
+  "main": "src/scaffold.js",
+  "bin": {
+    "communard": "bin/scaffold"
+  },
+  "scripts": {
+    "test": "echo \"You would better write some tests, right?\"",
+    "snyk-protect": "snyk protect",
+    "prepare": "yarn run snyk-protect"
+  },
+  "keywords": [
+    "cli",
+    "tournant"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "bin/",
+    "src/"
+  ],
+  "author": "Tournant <team@tournant.dev> (http://www.tournant.dev)",
+  "license": "MIT",
+  "dependencies": {
+    "arg": "^4.1.1",
+    "chalk": "^2.4.2",
+    "esm": "^3.2.25",
+    "execa": "^3.2.0",
+    "inquirer": "^7.1.0",
+    "ncp": "^2.0.0",
+    "replace-in-files": "^2.0.3",
+    "validate-npm-package-name": "^3.0.0",
+    "snyk": "^1.316.1"
+  },
+  "snyk": true
 }