mirror of
https://github.com/danielmiessler/Fabric.git
synced 2026-01-31 09:08:04 -05:00
5d93f126d4
Removes the cn (Chuck Norris jokes) package which was pulling in vulnerable versions of string and request packages with no patches available. This resolves 5 Dependabot alerts: - Alert #52: string package (HIGH) - ReDoS - Alert #35: string package (HIGH) - ReDoS - Alert #61: request package (MEDIUM) - SSRF - Alert #44: request package (MEDIUM) - SSRF - Alert #38: request package (MEDIUM) - Remote Memory Exposure Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
109 lines
3.3 KiB
JSON
109 lines
3.3 KiB
JSON
{
|
|
"name": "fabric",
|
|
"version": "0.0.1",
|
|
"private": true,
|
|
"scripts": {
|
|
"prebuild": "mkdir -p static/data && cp ../scripts/pattern_descriptions/pattern_descriptions.json static/data/",
|
|
"predev": "mkdir -p static/data && cp ../scripts/pattern_descriptions/pattern_descriptions.json static/data/",
|
|
"dev": "vite dev",
|
|
"build": "vite build",
|
|
"preview": "vite preview",
|
|
"check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
|
|
"check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
|
|
"test": "vitest",
|
|
"lint": "prettier --check . && eslint .",
|
|
"format": "prettier --write ."
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.27.0",
|
|
"@skeletonlabs/skeleton": "^2.11.0",
|
|
"@skeletonlabs/tw-plugin": "^0.3.1",
|
|
"@sveltejs/adapter-auto": "^3.3.1",
|
|
"@sveltejs/kit": "^2.49.5",
|
|
"@sveltejs/vite-plugin-svelte": "^3.1.2",
|
|
"@tailwindcss/forms": "^0.5.10",
|
|
"@tailwindcss/typography": "^0.5.16",
|
|
"@types/node": "^20.17.50",
|
|
"autoprefixer": "^10.4.21",
|
|
"eslint-plugin-svelte": "^2.46.1",
|
|
"lucide-svelte": "^0.309.0",
|
|
"mdsvex": "^0.11.2",
|
|
"patch-package": "^8.0.1",
|
|
"pdf-to-markdown-core": "github:jzillmann/pdf-to-markdown#modularize",
|
|
"pdfjs-dist": "^5.4.449",
|
|
"postcss": "^8.5.3",
|
|
"postcss-load-config": "^6.0.1",
|
|
"rehype-autolink-headings": "^7.1.0",
|
|
"rehype-slug": "^6.0.0",
|
|
"shiki": "^1.29.2",
|
|
"svelte": "^4.2.20",
|
|
"svelte-check": "^3.8.6",
|
|
"svelte-inview": "^4.0.4",
|
|
"svelte-markdown": "^0.4.1",
|
|
"svelte-reveal": "^1.1.0",
|
|
"svelte-youtube-embed": "^0.3.3",
|
|
"svelte-youtube-lite": "^0.6.2",
|
|
"tailwindcss": "^3.4.17",
|
|
"typescript": "^5.8.3",
|
|
"vite": "^5.4.21",
|
|
"vite-plugin-tailwind-purgecss": "^0.2.1"
|
|
},
|
|
"type": "module",
|
|
"overrides": {
|
|
"qs": ">=6.14.1",
|
|
"form-data": ">=2.5.4",
|
|
"glob": ">=10.5.0",
|
|
"tunnel-agent": ">=0.6.0",
|
|
"hawk": ">=9.0.1",
|
|
"http-signature": ">=0.10.0",
|
|
"mime": ">=1.4.1",
|
|
"hoek": ">=4.2.1",
|
|
"cookie": ">=0.7.0",
|
|
"tough-cookie": ">=4.1.3",
|
|
"esbuild": ">=0.25.0",
|
|
"@eslint/plugin-kit": ">=0.3.4"
|
|
},
|
|
"dependencies": {
|
|
"@floating-ui/dom": "^1.7.0",
|
|
"clsx": "^2.1.1",
|
|
"date-fns": "^4.1.0",
|
|
"highlight.js": "^11.11.1",
|
|
"marked": "^15.0.12",
|
|
"nanoid": "5.0.9",
|
|
"rehype": "^13.0.2",
|
|
"rehype-external-links": "^3.0.0",
|
|
"rehype-unwrap-images": "^1.0.0",
|
|
"tailwind-merge": "^2.6.0",
|
|
"vfile-message": "^4.0.2",
|
|
"yaml": "^2.8.0",
|
|
"youtube-transcript": "^1.2.1"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"tunnel-agent@<0.6.0": ">=0.6.0",
|
|
"qs@<6.0.4": ">=6.0.4",
|
|
"qs@<1.0.0": ">=1.0.0",
|
|
"qs@<6.14.1": ">=6.14.1",
|
|
"hawk@<3.1.3": ">=3.1.3",
|
|
"http-signature@<0.10.0": ">=0.10.0",
|
|
"request@>=2.2.6 <2.47.0": ">=2.68.0",
|
|
"mime@<1.4.1": ">=1.4.1",
|
|
"hoek@<4.2.1": ">=4.2.1",
|
|
"hawk@<9.0.1": ">=9.0.1",
|
|
"qs@<6.2.4": ">=6.2.4",
|
|
"cookie@<0.7.0": ">=0.7.0",
|
|
"tough-cookie@<4.1.3": ">=4.1.3",
|
|
"nanoid@<3.3.8": ">=3.3.8",
|
|
"form-data@<2.5.4": ">=2.5.4",
|
|
"glob@>=10.2.0 <10.5.0": ">=10.5.0",
|
|
"esbuild@<=0.24.2": ">=0.25.0",
|
|
"@eslint/plugin-kit@<0.3.4": ">=0.3.4"
|
|
},
|
|
"onlyBuiltDependencies": [
|
|
"esbuild",
|
|
"pdf-to-markdown-core",
|
|
"svelte-preprocess"
|
|
]
|
|
}
|
|
}
|