.snyk

# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
version: v1.25.1
# ignores vulnerabilities until expiry date; change duration by modifying expiry date
ignore:
  SNYK-JS-AGGRIDCOMMUNITY-1932011:
    - '*':
        reason: >-
          Not applicable as we do not use a valueFormatter or cellRenderer
          function
        expires: 2025-09-17T13:05:57.065Z
        created: 2024-01-18T18:27:24.353Z
  SNYK-JS-AGGRIDCOMMUNITY-7414157:
    - '*':
        reason: >-
          Not applicable as we don't use ag-grid utils and the library never
          passes user input directly to the merge function
        expires: 2025-09-17T13:05:57.065Z
        created: 2024-09-17T13:05:57.071Z
  SNYK-JS-ELECTRON-8642944:
    - '*':
        reason: >-
          Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
        expires: 2025-03-26T09:48:32.235Z
        created: 2025-01-27T09:48:32.246Z
  SNYK-JS-ELECTRON-8642948:
    - '*':
        reason: >-
          Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
        expires: 2025-03-26T09:49:13.962Z
        created: 2025-01-27T09:49:13.968Z
  SNYK-JS-ELECTRON-8097217:
    - '*':
        reason: >-
          Not applicable: requires attacker to inject and execute custom
          javascript on the page AND experimental api to be enabled (see
          https://issues.chromium.org/issues/365376497)
        expires: 2025-03-26T09:49:21.587Z
        created: 2025-01-27T09:49:21.596Z
  SNYK-JS-ELECTRON-8604283:
    - '*':
        reason: >-
          Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
        expires: 2025-03-26T09:49:31.423Z
        created: 2025-01-27T09:49:31.431Z
  SNYK-JS-ELECTRON-8642946:
    - '*':
        reason: >-
          Fixed in https://github.com/electron/electron/releases/tag/v32.3.0
        expires: 2025-02-26T09:49:38.738Z
        created: 2025-01-27T09:49:38.746Z
# patches apply the minimum changes required to fix a vulnerability
patch:
  'npm:ms:20170412':
    - debug > ms:
        patched: '2018-08-10T04:22:22.836Z'