# @snyk/protect

> Snyk protect library and utility

Latest version **1.1308.0** (published 2026-10-08) · Apache-2.0 license · 0 weekly downloads

## Install

```sh
npm install @snyk/protect
pnpm add @snyk/protect
yarn add @snyk/protect
bun add @snyk/protect
```

Provides the command `snyk-protect`.

## Health

**Score 65/100 (B)** — status: active.

Positive: has types; no vulnerabilities; recently updated; high maintenance score; high quality score.

Warnings: low downloads; no esm support.

## Facts

| | |
|---|---|
| Version | 1.1308.0 |
| Published | 2026-10-08 |
| First published | 2021-02-03 |
| Weekly downloads | 0 |
| License | Apache-2.0 |
| TypeScript types | bundled |
| Module format | CommonJS |
| Node | >=10 |
| Dependencies | 0 |
| Unpacked size | 46.7 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 5670 |
| Author | snyk.io |
| Maintainers | snyk-admin |
| Keywords | security, vulnerabilities, advisories, audit, snyk, scan, docker, container, scanning |

## Links

- npm: https://www.npmjs.com/package/@snyk/protect
- Repository: https://github.com/snyk/snyk
- Homepage: https://github.com/snyk/snyk#readme
- Issues: https://github.com/snyk/snyk/issues
- npm.io page: https://npm.io/package/@snyk/protect

## Recent versions

- 1.1308.0 (latest) — 2026-10-08
- 1.1309.0-preview.3b5e0641a3c2d397e755a9667223f31a9e9f31d7 (preview) — 2026-10-09
- 1.1308.0-rc.3f5297bba4b8ecb04e7b160c4e80e2eedfa9b7fc (rc) — 2026-09-29
- 1.0.0-dev-f8b64f76b9eead9e87f1accc9eff1e1c1de7ab6c (hammertest) — 2021-02-19
- 1.1308.0-preview.d6c408c5ed36453c6130479494ff7402f68266a7 — 2026-10-08
- 1.1308.0-preview.05d5514d87378cc8f6d5d0fb2b29e42256b3ed76 — 2026-10-07
- 1.1308.0-preview.f2ffaf8da4d04701c11c1e23fe0752dd26f5d0bb — 2026-10-06
- 1.1308.0-preview.07b24a85c654ae756458e3b8aac22e70a8ae77b4 — 2026-10-05
- 1.1308.0-preview.bcfa4bbdcf59f28bfef04fdcb6661e53e5507e52 — 2026-10-05
- 1.1308.0-preview.09698baecceea94916aab43d8b36dc184ffa2168 — 2026-10-05
- 1.1308.0-preview.dd75097601d590eaddd76e0c38eff9ffedfc087f — 2026-10-02
- 1.1308.0-preview.4514106dc26594dde0bfb0b79c0d8c76ff0ba192 — 2026-10-01
- 1.1308.0-preview.4d495e10c75873408ae47bc5185832ad46f4522e — 2026-10-01
- 1.1308.0-preview.a21e710eb58323ec08b7d1add21ba47a0c9152c2 — 2026-10-01
- 1.1308.0-preview.ab08be6a44773c37f838b11698a2d615350c48cb — 2026-09-30
- … 1093 more at https://npm.io/package/@snyk/protect/versions

## README

# @snyk/protect

[![npm](https://img.shields.io/npm/v/@snyk/protect)](https://www.npmjs.com/package/@snyk/protect)
[![Known Vulnerabilities](https://snyk.io/test/github/snyk/snyk/badge.svg)](https://snyk.io/test/github/snyk/snyk)

![Snyk](https://snyk.io/style/asset/logo/snyk-print.svg)

Patch vulnerable code in your project's dependencies. This package is officially maintained by [Snyk](https://snyk.io).

## Usage

You don't typically need to add the @snyk/protect dependency manually. It'll be introduced when it's needed as part of [Snyk's Fix PR service](https://support.snyk.io/hc/en-us/articles/360011484018-Fixing-vulnerabilities).

To enable patches in your Fix PRs:

- Visit https://app.snyk.io
- Go to "Org Settings" > "Integrations"
- Choose "Edit Settings" under your SCM integration.
- Under the "Fix Pull Request" section, ensure patches are enabled.

Snyk will now include patches as part of its Fix PRs for your project.

## How it works

If there's a patch available for a vulnerability in your project, the Fix PR:

- Adds a `patch` entry to your `.snyk` file.
- Adds `@snyk/protect` to your `package.json`'s dependencies.
- Adds `@snyk/protect` to your `package.json`'s [`prepare` script](https://docs.npmjs.com/cli/v7/using-npm/scripts).

```patch
 {
   "name": "my-project",
   "scripts": {
+    "prepare": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "dependencies": {
+    "@snyk/protect": "^1.657.0"
   }
 }
```

Now after you run npm install, @snyk/protect will automatically download each patch configured in your .snyk file and apply them to your installed dependencies.

## Migrating from `snyk protect` to `@snyk/protect`

`@snyk/protect` is a standalone replacement for `snyk protect`. They both do the same job, however:

- `@snyk/protect` has zero dependencies.
- You don't need to include `snyk` in your dependencies (which is a much larger package with many dependencies).

If you already have Snyk Protect set up, you can migrate to `@snyk/protect` by applying the following changes to your `package.json`:

```patch
 {
   "name": "my-project",
   "scripts": {
     "prepare": "npm run snyk-protect",
-    "snyk-protect": "snyk protect"
+    "snyk-protect": "snyk-protect"
   },
   "dependencies": {
-    "snyk": "^1.500.0"
+    "@snyk/protect": "^1.657.0"
   }
 }
```

We have also created the [@snyk/cli-protect-upgrade](https://www.npmjs.com/package/@snyk/cli-protect-upgrade) npx script which you can use to update your project automatically. To use it, `cd` to the location containing the package.json to be updated and run:

```
npx @snyk/cli-protect-upgrade
```

---

Made with 💜 by Snyk

---
_Source: https://npm.io/package/@snyk/protect · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._