mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-26 11:49:16 +00:00
859839082c
npm audit was failing CI with a high-severity DoS advisory (GHSA-3jxr-9vmj-r5cp, plus GHSA-jxxr-4gwj-5jf2 on the frontend) for brace-expansion, pulled in transitively through eslint -> minimatch. It is a lint-only dev dependency, never bundled into the runtime image, but the audit gate blocks on it regardless. Pins it via overrides instead of accepting the wider dependency bump npm audit fix proposes, since minimatch already declares a compatible range for the patched version.
95 lines
2.8 KiB
JSON
95 lines
2.8 KiB
JSON
{
|
|
"name": "backend",
|
|
"version": "1.0.0",
|
|
"description": "",
|
|
"main": "index.js",
|
|
"scripts": {
|
|
"postinstall": "test -f scripts/generate-version.js && node scripts/generate-version.js || true",
|
|
"prebuild": "node scripts/generate-version.js",
|
|
"build": "tsc",
|
|
"start": "node dist/index.js",
|
|
"predev": "node scripts/generate-version.js",
|
|
"dev": "nodemon --watch src --ext ts,json --exec ts-node src/index.ts",
|
|
"test": "vitest run",
|
|
"lint": "eslint src",
|
|
"reset-mfa": "node dist/cli/resetMfa.js",
|
|
"reset-password": "node dist/cli/resetPassword.js",
|
|
"create-emergency-admin": "node dist/cli/createEmergencyAdmin.js",
|
|
"clear-sessions": "node dist/cli/clearSessions.js",
|
|
"disable-sso": "node dist/cli/disableSso.js",
|
|
"diagnostics": "node dist/cli/diagnostics.js",
|
|
"validate-db": "node dist/cli/validateDb.js",
|
|
"backup-data": "node dist/cli/backupData.js"
|
|
},
|
|
"keywords": [],
|
|
"author": "",
|
|
"license": "AGPL-3.0-only",
|
|
"type": "commonjs",
|
|
"engines": {
|
|
"node": ">=26.0.0"
|
|
},
|
|
"overrides": {
|
|
"brace-expansion": "^5.0.7"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^10.0.1",
|
|
"@types/bcrypt": "^6.0.0",
|
|
"@types/better-sqlite3": "^7.6.13",
|
|
"@types/compression": "^1.8.1",
|
|
"@types/cookie-parser": "^1.4.10",
|
|
"@types/cors": "^2.8.19",
|
|
"@types/dockerode": "^4.0.1",
|
|
"@types/express": "^5.0.6",
|
|
"@types/http-proxy": "^1.17.17",
|
|
"@types/http-proxy-middleware": "^1.0.0",
|
|
"@types/jsonwebtoken": "^9.0.10",
|
|
"@types/multer": "^2.1.0",
|
|
"@types/node": "^26.0.0",
|
|
"@types/semver": "^7.7.1",
|
|
"@types/supertest": "^7.2.0",
|
|
"@types/tar-stream": "^3.1.4",
|
|
"@types/ws": "^8.18.1",
|
|
"@types/yaml": "^1.9.6",
|
|
"eslint": "^10.1.0",
|
|
"nodemon": "^3.1.13",
|
|
"supertest": "^7.2.2",
|
|
"ts-node": "^10.9.2",
|
|
"typescript": "^6.0.2",
|
|
"typescript-eslint": "^8.0.0",
|
|
"vitest": "^4.1.0"
|
|
},
|
|
"optionalDependencies": {
|
|
"@aws-sdk/client-ecr": "^3.1019.0",
|
|
"@aws-sdk/client-s3": "^3.1037.0"
|
|
},
|
|
"dependencies": {
|
|
"axios": "^1.15.0",
|
|
"bcrypt": "^6.0.0",
|
|
"better-sqlite3": "^12.6.2",
|
|
"composerize": "^1.7.5",
|
|
"compression": "^1.8.1",
|
|
"cookie-parser": "^1.4.7",
|
|
"cors": "^2.8.6",
|
|
"cron-parser": "^5.5.0",
|
|
"dockerode": "^5.0.0",
|
|
"express": "^5.2.1",
|
|
"express-rate-limit": "^8.3.1",
|
|
"helmet": "^8.1.0",
|
|
"http-proxy": "^1.18.1",
|
|
"http-proxy-middleware": "^4.0.0",
|
|
"isomorphic-git": "^1.37.5",
|
|
"jsonwebtoken": "^9.0.3",
|
|
"ldapts": "^9.0.0",
|
|
"multer": "^2.1.1",
|
|
"node-pty": "^1.1.0",
|
|
"openid-client": "^6.8.2",
|
|
"otplib": "^13.4.0",
|
|
"semver": "^7.7.4",
|
|
"systeminformation": "^5.31.1",
|
|
"tar-stream": "^3.1.8",
|
|
"ws": "^8.19.0",
|
|
"yaml": "^2.8.2",
|
|
"zod": "^4.3.6"
|
|
}
|
|
}
|