Jakob Wennberg
ca3ae65b12
ws@8.19.0 (transitive via @supabase/supabase-js -> @supabase/realtime-js) carries GHSA-96hv-2xvq-fx4p (memory-exhaustion DoS, CVSS 7.5), fixed in 8.21.0. The docker-publish "Scan image with Trivy" step runs severity=CRITICAL,HIGH with ignore-unfixed=true, so this fixable HIGH has been failing the image scan on every merge to main. Force ws>=8.21.0 via an npm override. The only remaining HIGH (xlsx) has no upstream fix and is skipped by ignore-unfixed, so the Trivy gate should pass. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
96 lines
3.0 KiB
JSON
96 lines
3.0 KiB
JSON
{
|
|
"name": "erp-base",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"license": "AGPL-3.0-or-later",
|
|
"scripts": {
|
|
"setup:extensions": "npx tsx scripts/generate-extension-registry.ts",
|
|
"skills:generate": "npx tsx scripts/generate-skill-bodies.ts",
|
|
"skills:check": "npx tsx scripts/generate-skill-bodies.ts --check",
|
|
"taxonomy:generate": "npx tsx scripts/generate-taxonomy-registry.ts",
|
|
"taxonomy:check": "npx tsx scripts/generate-taxonomy-registry.ts --check",
|
|
"validate:ixbrl": "node scripts/validate-ixbrl.mjs",
|
|
"predev": "npm run setup:extensions && node scripts/inject-public-branding.mjs",
|
|
"dev": "next dev",
|
|
"prebuild": "npm run setup:extensions && node scripts/inject-public-branding.mjs",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "eslint",
|
|
"check:guards": "node scripts/checks/no-new-antipatterns.mjs",
|
|
"check:lint": "node scripts/checks/no-new-lint-errors.mjs",
|
|
"test": "vitest run --project unit",
|
|
"test:pg": "vitest run --project pg-real"
|
|
},
|
|
"dependencies": {
|
|
"@anthropic-ai/bedrock-sdk": "^0.29.1",
|
|
"@hookform/resolvers": "^5.2.2",
|
|
"@radix-ui/react-checkbox": "^1.3.3",
|
|
"@radix-ui/react-dialog": "^1.1.15",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.16",
|
|
"@radix-ui/react-label": "^2.1.8",
|
|
"@radix-ui/react-progress": "^1.1.8",
|
|
"@radix-ui/react-select": "^2.2.6",
|
|
"@radix-ui/react-slot": "^1.2.4",
|
|
"@radix-ui/react-switch": "^1.2.6",
|
|
"@radix-ui/react-tabs": "^1.1.13",
|
|
"@radix-ui/react-toast": "^1.2.15",
|
|
"@radix-ui/react-tooltip": "^1.2.8",
|
|
"@react-pdf/renderer": "^4.3.2",
|
|
"@supabase/ssr": "^0.8.0",
|
|
"@supabase/supabase-js": "^2.93.1",
|
|
"@tailwindcss/typography": "^0.5.19",
|
|
"@types/qrcode": "^1.5.6",
|
|
"@upstash/ratelimit": "^2.0.8",
|
|
"@upstash/redis": "^1.37.0",
|
|
"@use-gesture/react": "^10.3.1",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"date-fns": "^4.1.0",
|
|
"framer-motion": "^12.29.2",
|
|
"fuse.js": "^7.1.0",
|
|
"ics": "^3.8.1",
|
|
"jszip": "^3.10.1",
|
|
"lucide-react": "^0.563.0",
|
|
"mailparser": "^3.9.8",
|
|
"next": "16.2.9",
|
|
"next-intl": "^4.12.0",
|
|
"next-themes": "^0.4.6",
|
|
"pdf-lib": "^1.17.1",
|
|
"qrcode": "^1.5.4",
|
|
"react": "19.2.3",
|
|
"react-dom": "19.2.3",
|
|
"react-hook-form": "^7.71.1",
|
|
"react-markdown": "^10.1.0",
|
|
"recharts": "^3.7.0",
|
|
"remark-gfm": "^4.0.1",
|
|
"resend": "^6.9.1",
|
|
"server-only": "^0.0.1",
|
|
"sharp": "^0.34.5",
|
|
"svix": "^1.85.0",
|
|
"tailwind-merge": "^3.4.0",
|
|
"web-push": "^3.6.7",
|
|
"xlsx": "^0.18.5",
|
|
"zod": "^4.3.6"
|
|
},
|
|
"devDependencies": {
|
|
"@tailwindcss/postcss": "^4",
|
|
"@types/mailparser": "^3.4.6",
|
|
"@types/node": "^20",
|
|
"@types/pg": "^8.20.0",
|
|
"@types/react": "^19",
|
|
"@types/react-dom": "^19",
|
|
"@types/sharp": "^0.31.1",
|
|
"@types/web-push": "^3.6.4",
|
|
"dotenv": "^17.2.3",
|
|
"eslint": "^9",
|
|
"eslint-config-next": "16.1.5",
|
|
"pg": "^8.20.0",
|
|
"tailwindcss": "^4",
|
|
"typescript": "^5",
|
|
"vitest": "^4.0.18"
|
|
},
|
|
"overrides": {
|
|
"ws": "^8.21.0"
|
|
}
|
|
}
|