peter
b1ff4058ac
The server gate adds `vite build` (and with it devOnlyGuard, which until now first ran inside the image build, after main was pushed) and `npm audit --omit=dev --audit-level=high`. pip-audit is blocking: when it was finally read it held three urllib3 advisories with a fix available. urllib3 goes 2.7.0 -> 2.8.0 as a single in-place pin, passing pip check, rather than a regeneration that would move every package. The dev toolchain's 18 advisories are gone: - vite 5 -> 6.4.3 (path traversal, fs.deny bypass, and esbuild <= 0.24.2 through it); - vitest 3 -> 4.1.11 (mocker path traversal); - typescript-eslint 8.46 -> 8.71; - `npm audit fix` for the rest. tsc, eslint, knip, all 2269 tests and the build pass unchanged. scripts/check-node-modules.mjs checks that frontend/node_modules holds exactly what package-lock.json pins. The local gate's frontend lanes judge the host tree, and nothing tied it to the lock the image installs.
71 lines
2.1 KiB
JSON
71 lines
2.1 KiB
JSON
{
|
|
"name": "siftlode-frontend",
|
|
"private": true,
|
|
"license": "AGPL-3.0-only",
|
|
"type": "module",
|
|
"engines": {
|
|
"node": "24.x"
|
|
},
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"typecheck": "npm run typecheck:app && npm run typecheck:node && npm run typecheck:e2e",
|
|
"typecheck:app": "tsc --noEmit -p tsconfig.json",
|
|
"typecheck:node": "tsc -p tsconfig.node.json",
|
|
"typecheck:e2e": "tsc --noEmit -p e2e/tsconfig.json",
|
|
"build": "npm run typecheck:app && npm run typecheck:node && vite build",
|
|
"preview": "vite preview",
|
|
"knip": "knip && knip --production",
|
|
"lint": "eslint . --max-warnings 0",
|
|
"format": "prettier --write .",
|
|
"format:check": "prettier --check .",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"e2e": "playwright test"
|
|
},
|
|
"dependencies": {
|
|
"@dnd-kit/core": "^6.3.1",
|
|
"@dnd-kit/sortable": "^10.0.0",
|
|
"@dnd-kit/utilities": "^3.2.2",
|
|
"@floating-ui/react": "^0.27.20",
|
|
"@tanstack/react-query": "^5.51.0",
|
|
"@tanstack/react-virtual": "^3.14.3",
|
|
"clsx": "^2.1.1",
|
|
"flag-icons": "^7.5.0",
|
|
"hls.js": "^1.6.16",
|
|
"i18next": "^23.11.5",
|
|
"lucide-react": "^0.408.0",
|
|
"react": "19.3.0",
|
|
"react-dom": "19.3.0",
|
|
"react-i18next": "^15.7.4"
|
|
},
|
|
"devDependencies": {
|
|
"@babel/core": "7.29.7",
|
|
"@eslint-community/eslint-plugin-eslint-comments": "4.8.1",
|
|
"@eslint/js": "9.39.1",
|
|
"@playwright/test": "^1.61.1",
|
|
"@tailwindcss/postcss": "^4.3.3",
|
|
"@testing-library/react": "^16.3.2",
|
|
"@types/node": "^24.13.6",
|
|
"@types/react": "19.3.0",
|
|
"@types/react-dom": "19.3.0",
|
|
"@vitejs/plugin-react": "^4.3.1",
|
|
"@vitest/eslint-plugin": "1.6.27",
|
|
"babel-plugin-react-compiler": "1.0.0",
|
|
"eslint": "9.39.1",
|
|
"eslint-config-prettier": "10.1.8",
|
|
"eslint-plugin-playwright": "2.12.0",
|
|
"eslint-plugin-react-hooks": "7.1.1",
|
|
"eslint-plugin-react-refresh": "0.4.24",
|
|
"globals": "16.5.0",
|
|
"jsdom": "^25.0.1",
|
|
"knip": "6.27.0",
|
|
"postcss": "^8.4.39",
|
|
"prettier": "3.6.2",
|
|
"tailwindcss": "^4.3.3",
|
|
"typescript": "^5.5.3",
|
|
"typescript-eslint": "8.71.0",
|
|
"vite": "^6.4.3",
|
|
"vitest": "^4.1.11"
|
|
}
|
|
}
|