Teknium
a1e4fee33d
Audit of every changed version across all 4 npm locks + uv.lock against the >=2-week supply-chain aging rule: - ip-address: 10.4.0 (8d, and a minor feature release) -> 10.3.1 (exactly 14d, the CVE-fix patch for GHSA-mwp4-54f8-5fhr) - nanoid: floating resolutions pulled 3.3.18/6.0.1 (1d/5d, post-fix releases) -> scoped overrides nanoid@^3=3.3.17 (the CVE-fix version) and nanoid@^6=6.0.0 (27d) - js-yaml/undici: scoped overrides pin the exact CVE-fix versions so transitive copies can't float to newer releases - postcss: 8.5.25/8.5.26 (2d, npm update drift) -> pinned 8.5.23 (15d) - @electron/get 5.1.0 (12d) -> 5.0.0 (108d), @electron-internal/extract-zip 1.0.5 (10d) -> 1.0.4 (45d) — electron 40.10.6's carets resolved to sub-14d releases; both were incidental drift, not CVE fixes - website: nanoid override 3.3.17 Remaining sub-14d versions are exclusively documented CVE-fix exceptions (.npmrc min-release-age-exclude entries with removal dates): brace-expansion 5.0.9, dompurify 3.4.13, js-yaml 4.3.1, mermaid 11.16.1, nanoid 3.3.17, fast-uri 3.1.5, h2 4.4.1 (pyproject exclude-newer exception). Rescan: 18 findings (blocked-upstream only). npm run check green.
65 lines
1.7 KiB
JSON
65 lines
1.7 KiB
JSON
{
|
|
"name": "website",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"docusaurus": "docusaurus",
|
|
"prestart": "node scripts/prebuild.mjs",
|
|
"start": "docusaurus start",
|
|
"prebuild": "node scripts/prebuild.mjs",
|
|
"build": "docusaurus build",
|
|
"build:fast": "docusaurus build --locale en",
|
|
"swizzle": "docusaurus swizzle",
|
|
"deploy": "docusaurus deploy",
|
|
"clear": "docusaurus clear",
|
|
"serve": "docusaurus serve",
|
|
"write-translations": "docusaurus write-translations",
|
|
"write-heading-ids": "docusaurus write-heading-ids",
|
|
"typecheck": "tsc -p . --noEmit",
|
|
"lint:diagrams": "ascii-guard lint --exclude-code-blocks docs"
|
|
},
|
|
"dependencies": {
|
|
"@docusaurus/core": "3.10.2",
|
|
"@docusaurus/plugin-client-redirects": "3.10.2",
|
|
"@docusaurus/preset-classic": "3.10.2",
|
|
"@docusaurus/theme-mermaid": "3.10.2",
|
|
"@mdx-js/react": "3.1.1",
|
|
"clsx": "2.1.1",
|
|
"prism-react-renderer": "2.3.0",
|
|
"react": "19.2.7",
|
|
"react-dom": "19.2.7"
|
|
},
|
|
"devDependencies": {
|
|
"@docusaurus/module-type-aliases": "3.10.2",
|
|
"@docusaurus/tsconfig": "3.10.2",
|
|
"@docusaurus/types": "3.10.2",
|
|
"typescript": "6.0.3"
|
|
},
|
|
"overrides": {
|
|
"serialize-javascript": "7.0.7",
|
|
"uuid": "14.0.1",
|
|
"minimatch": "10.2.6",
|
|
"nanoid": "3.3.17"
|
|
},
|
|
"browserslist": {
|
|
"production": [
|
|
">0.5%",
|
|
"not dead",
|
|
"not op_mini all"
|
|
],
|
|
"development": [
|
|
"last 3 chrome version",
|
|
"last 3 firefox version",
|
|
"last 5 safari version"
|
|
]
|
|
},
|
|
"engines": {
|
|
"node": ">=20.0",
|
|
"npm": ">=11.17.0"
|
|
},
|
|
"allowScripts": {
|
|
"core-js@3.49.0": true,
|
|
"core-js-pure@3.49.0": true
|
|
}
|
|
}
|