feat: upgrade snyk-module

snyk · Nov 28, 2019 · f1bd932 · f1bd932
1 parent 6f3b8ff
commit f1bd932
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 3 deletions.
diff --git a/.npmrc b/.npmrc
@@ -0,0 +1 @@
+package-lock=false
diff --git a/lib/filter/get-vuln-source.js b/lib/filter/get-vuln-source.js
@@ -6,7 +6,7 @@ var debug = require('debug')('snyk:policy');
 var resolve = require('snyk-resolve');
 var path = require('path');
 var statSync = require('fs').statSync;
-var moduleToObject = require('snyk-module');
+var { parsePackageString: moduleToObject } = require('snyk-module');
 
 function getVulnSource(vuln, cwd, live) {
   var from = vuln.from.slice(1).map(function (pkg) {

diff --git a/lib/match.js b/lib/match.js
@@ -6,7 +6,7 @@ module.exports = {
 var debug = require('debug')('snyk:policy');
 var debugPolicy = require('debug')('snyk:protect');
 var semver = require('semver');
-var moduleToObject = require('snyk-module');
+var { parsePackageString: moduleToObject } = require('snyk-module');
 
 // matchPath will take the array of dependencies that a vulnerability came from
 // and try to match it to a string `path`. The path will look like this:

diff --git a/package.json b/package.json
@@ -27,7 +27,7 @@
     "js-yaml": "^3.13.1",
     "lodash.clonedeep": "^4.5.0",
     "semver": "^6.0.0",
-    "snyk-module": "^1.9.1",
+    "snyk-module": "^2.0.2",
     "snyk-resolve": "^1.0.1",
     "snyk-try-require": "^1.3.1",
     "then-fs": "^2.0.0"