[Snyk] Fix for 8 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

  • package.json

• Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches.
  Find out more.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Man-in-the-Middle (MitM) SNYK-JS-HTTPSPROXYAGENT-469131	Yes	Proof of Concept
	Denial of Service (DoS) SNYK-JS-JSYAML-173999	Yes	No Known Exploit
	Arbitrary Code Execution SNYK-JS-JSYAML-174129	Yes	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
	Prototype Pollution npm:hoek:20180212	Yes	No Known Exploit
	Uninitialized Memory Exposure npm:https-proxy-agent:20180402	Yes	Mature
	Uninitialized Memory Exposure npm:tunnel-agent:20170305	Yes	Proof of Concept

Commit messages

Package name: coveralls

The new version differs by 3 commits.

• 2ed4d09 major version bump for node > 4.x
• 5ebe57f bump version
• 428780c Expand allowed dependency versions to all API compatible versions (#172)

See the full diff

Package name: nsp

The new version differs by 28 commits.

• 1495eb3 3.0.0
• 70b1f1f wrap meta
• ff5566d update docs and dockerfile
• eb8ae26 force localhost as hostname
• 6e9e7fd use older boom to make node 6 happy
• e11c996 not sure what changed here but ok npm
• 868291f merge
• c3928e5 start adding tests
• ad94628 lint
• 3a00902 adding engines casue we only support 6.0.0 and greater for nsp 3.0.0- thx @jweinsteincbt
• 740f213 suggestion to run nsp gather when offline fails due to node advisory db, thanks @jweinsteincbt
• e28c457 dont require auth to fetch online exceptions
• 619460d add login command, fixup config saving
• 47407b8 help grouping
• 84c8646 cleanup error message output
• af8a486 dont wrap output
• dc8a3b1 group options
• f57a35c allow fetching exceptions from api with auth
• f1702ef print 400 error details in all reporters
• d3856ae cleanup
• 849f527 load .nsprc
• 97cfe6f make args.path consistent
• c2e23f4 Merge branch '3.0.0' of github.com:nodesecurity/nsp into 3.0.0
• 8c8b08c pass result.message for checks, fixed width in table reporter

See the full diff

With a Snyk patch:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic