Merge branch 'release/1.3.0' into master

Author: davesag

.github/dependabot.yml

@@ -0,0 +1,20 @@
+# Basic dependabot.yml file with
+# minimum configuration for two package managers
+
+version: 2
+updates:
+  # Enable version updates for npm
+  - package-ecosystem: "npm"
+    # Look for `package.json` and `lock` files in the `root` directory
+    directory: "/"
+    # Check the npm registry for updates every day (weekdays)
+    schedule:
+      interval: "daily"
+
+  # Enable version updates for Docker
+  # - package-ecosystem: "docker"
+  #   # Look for a `Dockerfile` in the `root` directory
+  #   directory: "/"
+  #   # Check for updates once a week
+  #   schedule:
+  #     interval: "weekly"

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,62 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [develop, master]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [develop]
+  schedule:
+    - cron: '0 4 * * 0'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        # Override automatic language detection by changing the below list
+        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
+        language: ['javascript']
+        # Learn more...
+        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    # If this run was triggered by a pull request event, then checkout
+    # the head of the pull request instead of the merge commit.
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

README.md

@@ -117,9 +117,7 @@ describe('src/models/User', () => {
   checkModelName(User)('User')
 
   context('properties', () => {
-    ;['age', 'firstname', 'lastname', 'email', 'token'].forEach(
-      checkPropertyExists(user)
-    )
+    ;['age', 'firstname', 'lastname', 'email', 'token'].forEach(checkPropertyExists(user))
   })
 
   context('associations', () => {
@@ -142,14 +140,14 @@ describe('src/models/User', () => {
 
 ### Built-in checks
 
-| Check | What it does |
-| --- | --- |
-| `checkHookDefined` | Checks that a particular hook is defined. |
-| `checkModelName` | Checks that the model is named correctly. |
-| `checkNonUniqueIndex` | Checks that a specific non-unique index is defined. |
-| `checkPropertyExists` | Checks that the model has defined the given property. |
+| Check                      | What it does                                             |
+| -------------------------- | -------------------------------------------------------- |
+| `checkHookDefined`         | Checks that a particular hook is defined.                |
+| `checkModelName`           | Checks that the model is named correctly.                |
+| `checkNonUniqueIndex`      | Checks that a specific non-unique index is defined.      |
+| `checkPropertyExists`      | Checks that the model has defined the given property.    |
 | `checkUniqueCompoundIndex` | Checks that a specific unique compound index is defined. |
-| `checkUniqueIndex` | Checks that a specific unique index is defined. |
+| `checkUniqueIndex`         | Checks that a specific unique index is defined.          |
 
 ### Checking associations
 

SECURITY.md

@@ -0,0 +1,18 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.x     | :white_check_mark: |
+| < 1.x   | :x:                |
+
+## Reporting a Vulnerability
+
+Report a vulnerability to [the author](https://about.me/davesag) directly.
+
+You can expect to get an update on a reported vulnerability within 2 working days.
+
+## Vulnerabilities in development dependencies
+
+I'm using `dependabot` to scan for security issues and update dependencies in the `develop` branch regularly.