chore: remove snyk (#3299)

3 years ago · b8099bcef0
6 changed files with 76 additions and 3504 deletions
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@ -8,7 +8,6 @@ on:
      - "!**.css"
      - "!**.html"
      - "!.github/workflows/**"
-      - "!.snyk"

 env:
  PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: 1
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@ -11,7 +11,6 @@ on:
      - "!**.css"
      - "!**.html"
      - "!.github/workflows/**"
-      - "!.snyk"

 env:
  PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: 1
--- a/.snyk
+++ b/.snyk
@ -1,139 +0,0 @@
-# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
-version: v1.14.1
-ignore: {}
-# patches apply the minimum changes required to fix a vulnerability
-patch:
-  'npm:marked:20150520':
-    - marked:
-        patched: '2016-06-23T16:23:03.425Z'
-  'npm:marked:20170112':
-    - marked:
-        patched: '2017-03-29T09:01:37.856Z'
-    - marked:
-        patched: '2017-06-07T09:43:11.088Z'
-    - marked:
-        patched: '2017-07-20T02:06:37.369Z'
-    - marked:
-        patched: '2017-10-25T10:17:00.853Z'
-  'npm:ms:20170412':
-    - nightmare > electron > extract-zip > debug > ms:
-        patched: '2017-06-07T09:43:11.088Z'
-    - nightmare > electron > extract-zip > debug > ms:
-        patched: '2017-07-20T02:06:37.369Z'
-    - nightmare > electron > extract-zip > debug > ms:
-        patched: '2017-10-25T10:17:00.853Z'
-  'npm:debug:20170905':
-    - nightmare > electron > extract-zip > debug:
-        patched: '2017-09-28T04:02:06.707Z'
-    - nightmare > electron > extract-zip > debug:
-        patched: '2017-10-25T10:17:00.853Z'
-  'npm:marked:20170907':
-    - marked:
-        patched: '2017-10-26T16:49:48.403Z'
-  'npm:hawk:20160119':
-    - highlight.js > gear-lib > less > request > hawk:
-        patched: '2018-12-07T14:18:50.178Z'
-  'npm:http-signature:20150122':
-    - highlight.js > gear-lib > less > request > http-signature:
-        patched: '2018-12-07T14:18:50.178Z'
-  'npm:mime:20170907':
-    - highlight.js > gear-lib > mime:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > less > mime:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > less > request > form-data > mime:
-        patched: '2018-12-07T14:18:50.178Z'
-  'npm:minimatch:20160620':
-    - highlight.js > gear > liftoff > findup-sync > glob > minimatch:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > gear > liftoff > findup-sync > glob > minimatch:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > glob > minimatch:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > jslint > glob > minimatch:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > jshint > cli > glob > minimatch:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > jshint > minimatch:
-        patched: '2018-12-07T14:18:50.178Z'
-  'npm:request:20160119':
-    - highlight.js > gear-lib > less > request:
-        patched: '2018-12-07T14:18:50.178Z'
-  'npm:tunnel-agent:20170305':
-    - highlight.js > gear-lib > less > request > tunnel-agent:
-        patched: '2018-12-07T14:18:50.178Z'
-  'npm:uglify-js:20151024':
-    - highlight.js > gear-lib > handlebars > uglify-js:
-        patched: '2018-12-07T14:18:50.178Z'
-    - highlight.js > gear-lib > uglify-js:
-        patched: '2018-12-07T14:18:50.178Z'
-  'npm:uglify-js:20150824':
-    - highlight.js > gear-lib > handlebars > uglify-js:
-        patched: '2019-01-18T02:14:59.305Z'
-  SNYK-JS-LODASH-450202:
-    - opencollective > inquirer > lodash:
-        patched: '2019-07-04T07:40:22.289Z'
-    - snyk > snyk-mvn-plugin > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > snyk-nodejs-lockfile-parser > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > @snyk/dep-graph > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > inquirer > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > snyk-nuget-plugin > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > snyk-config > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > @snyk/dep-graph > graphlib > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > snyk-go-plugin > graphlib > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-    - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash:
-        patched: '2019-07-04T12:24:15.288Z'
-  SNYK-JS-HTTPSPROXYAGENT-469131:
-    - puppeteer > https-proxy-agent:
-        patched: '2019-10-02T11:47:04.942Z'
-    - snyk > proxy-agent > https-proxy-agent:
-        patched: '2019-10-02T11:47:04.942Z'
-    - snyk > proxy-agent > pac-proxy-agent > https-proxy-agent:
-        patched: '2019-10-02T11:47:04.942Z'
-  SNYK-JS-LODASH-567746:
-    - snyk > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - opencollective > inquirer > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > @snyk/dep-graph > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > inquirer > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-config > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-mvn-plugin > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-nodejs-lockfile-parser > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-nuget-plugin > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > @snyk/dep-graph > graphlib > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-go-plugin > graphlib > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/dep-graph > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-nuget-plugin > dotnet-deps-parser > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/dep-graph > graphlib > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/cocoapods-lockfile-parser > @snyk/ruby-semver > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
-    - snyk > @snyk/snyk-cocoapods-plugin > @snyk/cocoapods-lockfile-parser > @snyk/dep-graph > graphlib > lodash:
-        patched: '2020-05-07T07:38:45.159Z'
--- a/README.md
+++ b/README.md
@ -4,7 +4,6 @@
 [![Sponsors on Open Collective](https://opencollective.com/respec/sponsors/badge.svg)](#sponsors)
 [![Build Status](https://github.com/w3c/respec/workflows/Node%20CI/badge.svg?branch=develop)](https://github.com/w3c/respec/actions?query=workflow%3A%22Node+CI%22+branch%3Adevelop)
 [![Website status](https://img.shields.io/github/workflow/status/marcoscaceres/respec.org/Health%20Check?label=respec.org&logo=curl)](https://github.com/marcoscaceres/respec.org/actions?query=workflow%3A%22Health+Check%22)
-[![Known Vulnerabilities](https://snyk.io/test/github/w3c/respec/badge.svg)](https://snyk.io/test/github/w3c/respec)

 ReSpec is a JS library that makes it easier to write technical specifications, or documents
 that tend to be technical in nature in general. It was originally designed for the purpose
@ -15,7 +14,7 @@ well.

 If you are just interested in writing a spec, you can grab the [starter spec](examples/starter.html).

-We have extensive documentation on [how to use ReSpec](https://github.com/w3c/respec/wiki) in our wiki, including:  
+We have extensive documentation on [how to use ReSpec](https://github.com/w3c/respec/wiki) in our wiki, including:

  * [User's guide](https://github.com/w3c/respec/wiki/ReSpec-Editor's-Guide)
  * [WebIDL guide](https://github.com/w3c/respec/wiki/WebIDL-Guide)
@ -50,7 +49,7 @@ Bibliographical references have been moved out of ReSpec. You want to use

 ## Contribute

-Please see our [developer guide](https://github.com/w3c/respec/wiki/Developers-Guide). 
+Please see our [developer guide](https://github.com/w3c/respec/wiki/Developers-Guide).

 Please note that this project is released with a [Contributor Code of Conduct](CODE_OF_CONDUCT.md). By participating in this project you agree to abide by its terms.

--- a/package-lock.json
+++ b/package-lock.json
--- a/package.json
+++ b/package.json
@ -58,7 +58,6 @@
    "rollup-plugin-node-resolve": "^5.2.0",
    "rollup-plugin-terser": "^7.0.2",
    "serve": "^11.3.2",
-    "snyk": "^1.440.5",
    "typescript": "^4.1.3",
    "webidl2": "^23.13.0"
  },
@ -70,15 +69,12 @@
    "build:w3c": "node ./tools/builder.js --profile=w3c",
    "build:dini-debug": "node run build:dini -- --debug",
    "build:dini": "node ./tools/builder.js --profile=dini",
-    "build": "snyk protect",
    "builddeps": "rollup -c js/deps/rollup.config.js",
    "karma": "karma start --single-run",
    "lint": "tsc -p src/jsconfig.json && eslint .",
-    "prepare": "npm run snyk-protect && npm run builddeps",
+    "prepare": "npm run builddeps",
    "release": "node ./tools/release.js",
    "server": "serve",
-    "snyk-protect": "snyk protect",
-    "snyk": "snyk",
    "start": "node ./tools/dev-server.js",
    "test:build": "jasmine --random=false ./tests/test-build.js",
    "test:headless": "node ./tests/headless.js",
@ -99,7 +95,6 @@
    "trailingComma": "es5",
    "arrowParens": "avoid"
  },
-  "snyk": true,
  "funding": {
    "type": "opencollective",
    "url": "https://opencollective.com/respec"