Files
Fabric/web/package.json
Kayvan Sylvan 03a496912f security: add npm support with package-lock.json for dual package manager compatibility
Changes:
- Added npm "overrides" section to package.json alongside existing pnpm overrides
- Generated and tracked package-lock.json with security fixes applied
- Removed web/package-lock.json from .gitignore to support npm users
- Both npm and pnpm now enforce secure dependency versions

This enables developers to use either pnpm or npm while maintaining
consistent security posture across both package managers.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-25 13:53:00 -08:00

106 lines
3.2 KiB
JSON

{
"name": "fabric",
"version": "0.0.1",
"private": true,
"scripts": {
"prebuild": "mkdir -p static/data && cp ../scripts/pattern_descriptions/pattern_descriptions.json static/data/",
"predev": "mkdir -p static/data && cp ../scripts/pattern_descriptions/pattern_descriptions.json static/data/",
"dev": "vite dev",
"build": "vite build",
"preview": "vite preview",
"check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
"check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
"test": "vitest",
"lint": "prettier --check . && eslint .",
"format": "prettier --write ."
},
"devDependencies": {
"@eslint/js": "^9.27.0",
"@skeletonlabs/skeleton": "^2.11.0",
"@skeletonlabs/tw-plugin": "^0.3.1",
"@sveltejs/adapter-auto": "^3.3.1",
"@sveltejs/kit": "^2.49.5",
"@sveltejs/vite-plugin-svelte": "^3.1.2",
"@tailwindcss/forms": "^0.5.10",
"@tailwindcss/typography": "^0.5.16",
"@types/node": "^20.17.50",
"autoprefixer": "^10.4.21",
"eslint-plugin-svelte": "^2.46.1",
"lucide-svelte": "^0.309.0",
"mdsvex": "^0.11.2",
"patch-package": "^8.0.1",
"pdf-to-markdown-core": "github:jzillmann/pdf-to-markdown#modularize",
"pdfjs-dist": "^5.4.449",
"postcss": "^8.5.3",
"postcss-load-config": "^6.0.1",
"rehype-autolink-headings": "^7.1.0",
"rehype-slug": "^6.0.0",
"shiki": "^1.29.2",
"svelte": "^4.2.20",
"svelte-check": "^3.8.6",
"svelte-inview": "^4.0.4",
"svelte-markdown": "^0.4.1",
"svelte-reveal": "^1.1.0",
"svelte-youtube-embed": "^0.3.3",
"svelte-youtube-lite": "^0.6.2",
"tailwindcss": "^3.4.17",
"typescript": "^5.8.3",
"vite": "^5.4.21",
"vite-plugin-tailwind-purgecss": "^0.2.1"
},
"type": "module",
"overrides": {
"qs": ">=6.14.1",
"form-data": ">=2.5.4",
"glob": ">=10.5.0",
"tunnel-agent": ">=0.6.0",
"hawk": ">=9.0.1",
"http-signature": ">=0.10.0",
"mime": ">=1.4.1",
"hoek": ">=4.2.1",
"cookie": ">=0.7.0",
"tough-cookie": ">=4.1.3"
},
"dependencies": {
"@floating-ui/dom": "^1.7.0",
"clsx": "^2.1.1",
"cn": "^0.1.1",
"date-fns": "^4.1.0",
"highlight.js": "^11.11.1",
"marked": "^15.0.12",
"nanoid": "5.0.9",
"rehype": "^13.0.2",
"rehype-external-links": "^3.0.0",
"rehype-unwrap-images": "^1.0.0",
"tailwind-merge": "^2.6.0",
"vfile-message": "^4.0.2",
"yaml": "^2.8.0",
"youtube-transcript": "^1.2.1"
},
"pnpm": {
"overrides": {
"tunnel-agent@<0.6.0": ">=0.6.0",
"qs@<6.0.4": ">=6.0.4",
"qs@<1.0.0": ">=1.0.0",
"qs@<6.14.1": ">=6.14.1",
"hawk@<3.1.3": ">=3.1.3",
"http-signature@<0.10.0": ">=0.10.0",
"request@>=2.2.6 <2.47.0": ">=2.68.0",
"mime@<1.4.1": ">=1.4.1",
"hoek@<4.2.1": ">=4.2.1",
"hawk@<9.0.1": ">=9.0.1",
"qs@<6.2.4": ">=6.2.4",
"cookie@<0.7.0": ">=0.7.0",
"tough-cookie@<4.1.3": ">=4.1.3",
"nanoid@<3.3.8": ">=3.3.8",
"form-data@<2.5.4": ">=2.5.4",
"glob@>=10.2.0 <10.5.0": ">=10.5.0"
},
"onlyBuiltDependencies": [
"esbuild",
"pdf-to-markdown-core",
"svelte-preprocess"
]
}
}