forked from cartsnitch/cartsnitch
Barcode Betty
01ed6dac00
The CI's npm audit (10.8.2) flagged three transitive vulnerabilities that local newer-npm runs (11.x) miss due to advisory-DB divergence: - @babel/plugin-transform-modules-systemjs: 7.29.0 -> ^7.29.4 (CVE-2026-44728: arbitrary code generation, fixed in 7.29.4) - fast-uri: 3.1.0 -> ^3.1.2 (path traversal / host confusion via percent-encoded segments) - brace-expansion: 5.0.5 -> >=5.0.6 (DoS via large numeric range defeating max protection) These are non-breaking transitive updates within the same major version. The previous override for brace-expansion (>=1.1.13) was too loose to exclude 5.0.2-5.0.5; tightening it to >=5.0.6. Ref CAR-1162, CAR-1122, CAR-1078 Co-Authored-By: Paperclip <noreply@paperclip.ing>
61 lines
1.6 KiB
JSON
61 lines
1.6 KiB
JSON
{
|
|
"name": "cartsnitch",
|
|
"private": true,
|
|
"version": "0.1.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b && vite build",
|
|
"lint": "eslint .",
|
|
"preview": "vite preview",
|
|
"test": "NODE_ENV=test vitest run",
|
|
"test:watch": "NODE_ENV=test vitest",
|
|
"test:e2e": "npx playwright test"
|
|
},
|
|
"dependencies": {
|
|
"@tanstack/react-query": "^5.0.0",
|
|
"better-auth": "^1.2.0",
|
|
"picomatch": "4.0.4",
|
|
"react": "^18.3.1",
|
|
"react-dom": "^18.3.1",
|
|
"react-router-dom": "^7.0.0",
|
|
"recharts": "^3.8.0",
|
|
"zustand": "^5.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@axe-core/playwright": "^4.10.0",
|
|
"@eslint/js": "^9.39.4",
|
|
"@playwright/test": "^1.58.2",
|
|
"@tailwindcss/vite": "^4.0.0",
|
|
"@testing-library/jest-dom": "^6.6.3",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@types/node": "^24.12.0",
|
|
"@types/react": "^18.3.28",
|
|
"@types/react-dom": "^18.3.7",
|
|
"@vitejs/plugin-react": "^4.7.0",
|
|
"eslint": "^9.39.4",
|
|
"eslint-plugin-react-hooks": "^7.0.1",
|
|
"eslint-plugin-react-refresh": "^0.5.2",
|
|
"globals": "^17.4.0",
|
|
"jsdom": "^25.0.1",
|
|
"msw": "^2.12.14",
|
|
"playwright": "^1.58.2",
|
|
"tailwindcss": "^4.0.0",
|
|
"typescript": "^5.7.3",
|
|
"typescript-eslint": "^8.56.1",
|
|
"vite": "^6.4.2",
|
|
"vite-plugin-pwa": "^0.21.2",
|
|
"vitest": "^4.1.8"
|
|
},
|
|
"overrides": {
|
|
"@rollup/pluginutils": "5.3.0",
|
|
"flatted": "^3.4.2",
|
|
"serialize-javascript": "7.0.5",
|
|
"brace-expansion": ">=5.0.6",
|
|
"lodash": ">=4.17.24",
|
|
"minimatch": "^10.2.4",
|
|
"@babel/plugin-transform-modules-systemjs": "^7.29.4",
|
|
"fast-uri": "^3.1.2"
|
|
}
|
|
}
|