Barcode Betty 92015fc5e9 fix(deps): regenerate lockfile with defu 6.1.7, kysely 0.28.17 (CAR-1446) ...

Applied npm overrides from previous commit. Grype scan now passes
at --fail-on high with only MEDIUM-severity remaining CVEs in uuid
(GHSA-w5hq-g745-h8pq, major bump to v11 required, not a blocking risk)
and better-auth (GHSA-wxw3-q3m9-c3jr, updating to 1.6.2 separately).

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-06-23 03:43:04 +00:00

.gitea/workflows

ci(auth): update CAR-1446 comment with empirical OCI referrers proof

2026-06-23 02:50:37 +00:00

src

Add *.farh.net origins back to trustedOrigins

2026-05-25 09:43:43 +00:00

.env.example

feat(auth): enable email verification with Resend

2026-04-15 03:30:44 +00:00

.grype.yaml

Add CI workflow and Grype CVE ignores

2026-04-19 12:57:52 +00:00

.mcp.json

Add .mcp.json

2026-05-25 21:45:18 +00:00

Dockerfile

fix: remediate high-severity CVEs in Docker images

2026-04-14 23:51:42 +00:00

package-lock.json

fix(deps): regenerate lockfile with defu 6.1.7, kysely 0.28.17 (CAR-1446)

2026-06-23 03:43:04 +00:00

package.json

fix(deps): add npm overrides to pin patched versions of defu, kysely, picomatch (CAR-1446)

2026-06-23 03:42:45 +00:00

tsconfig.json

feat: migrate authentication to Better-Auth (Phase 1)

2026-03-28 04:46:10 +00:00

S

Description

CartSnitch auth service — Better-Auth session management

270 KiB

Languages

TypeScript 91%

Dockerfile 9%