Files
sencho/backend/package.json
T
Anso 859839082c fix: pin brace-expansion to a patched version in both packages (#1658)
npm audit was failing CI with a high-severity DoS advisory
(GHSA-3jxr-9vmj-r5cp, plus GHSA-jxxr-4gwj-5jf2 on the frontend) for
brace-expansion, pulled in transitively through eslint -> minimatch.
It is a lint-only dev dependency, never bundled into the runtime
image, but the audit gate blocks on it regardless.

Pins it via overrides instead of accepting the wider dependency bump
npm audit fix proposes, since minimatch already declares a compatible
range for the patched version.
2026-07-20 19:16:32 -04:00

95 lines
2.8 KiB
JSON

{
"name": "backend",
"version": "1.0.0",
"description": "",
"main": "index.js",
"scripts": {
"postinstall": "test -f scripts/generate-version.js && node scripts/generate-version.js || true",
"prebuild": "node scripts/generate-version.js",
"build": "tsc",
"start": "node dist/index.js",
"predev": "node scripts/generate-version.js",
"dev": "nodemon --watch src --ext ts,json --exec ts-node src/index.ts",
"test": "vitest run",
"lint": "eslint src",
"reset-mfa": "node dist/cli/resetMfa.js",
"reset-password": "node dist/cli/resetPassword.js",
"create-emergency-admin": "node dist/cli/createEmergencyAdmin.js",
"clear-sessions": "node dist/cli/clearSessions.js",
"disable-sso": "node dist/cli/disableSso.js",
"diagnostics": "node dist/cli/diagnostics.js",
"validate-db": "node dist/cli/validateDb.js",
"backup-data": "node dist/cli/backupData.js"
},
"keywords": [],
"author": "",
"license": "AGPL-3.0-only",
"type": "commonjs",
"engines": {
"node": ">=26.0.0"
},
"overrides": {
"brace-expansion": "^5.0.7"
},
"devDependencies": {
"@eslint/js": "^10.0.1",
"@types/bcrypt": "^6.0.0",
"@types/better-sqlite3": "^7.6.13",
"@types/compression": "^1.8.1",
"@types/cookie-parser": "^1.4.10",
"@types/cors": "^2.8.19",
"@types/dockerode": "^4.0.1",
"@types/express": "^5.0.6",
"@types/http-proxy": "^1.17.17",
"@types/http-proxy-middleware": "^1.0.0",
"@types/jsonwebtoken": "^9.0.10",
"@types/multer": "^2.1.0",
"@types/node": "^26.0.0",
"@types/semver": "^7.7.1",
"@types/supertest": "^7.2.0",
"@types/tar-stream": "^3.1.4",
"@types/ws": "^8.18.1",
"@types/yaml": "^1.9.6",
"eslint": "^10.1.0",
"nodemon": "^3.1.13",
"supertest": "^7.2.2",
"ts-node": "^10.9.2",
"typescript": "^6.0.2",
"typescript-eslint": "^8.0.0",
"vitest": "^4.1.0"
},
"optionalDependencies": {
"@aws-sdk/client-ecr": "^3.1019.0",
"@aws-sdk/client-s3": "^3.1037.0"
},
"dependencies": {
"axios": "^1.15.0",
"bcrypt": "^6.0.0",
"better-sqlite3": "^12.6.2",
"composerize": "^1.7.5",
"compression": "^1.8.1",
"cookie-parser": "^1.4.7",
"cors": "^2.8.6",
"cron-parser": "^5.5.0",
"dockerode": "^5.0.0",
"express": "^5.2.1",
"express-rate-limit": "^8.3.1",
"helmet": "^8.1.0",
"http-proxy": "^1.18.1",
"http-proxy-middleware": "^4.0.0",
"isomorphic-git": "^1.37.5",
"jsonwebtoken": "^9.0.3",
"ldapts": "^9.0.0",
"multer": "^2.1.1",
"node-pty": "^1.1.0",
"openid-client": "^6.8.2",
"otplib": "^13.4.0",
"semver": "^7.7.4",
"systeminformation": "^5.31.1",
"tar-stream": "^3.1.8",
"ws": "^8.19.0",
"yaml": "^2.8.2",
"zod": "^4.3.6"
}
}