mirror of
https://github.com/DeusData/codebase-memory-mcp.git
synced 2026-11-04 18:58:00 +00:00
Martin Vogel
8efab7d108
All 17 open alerts sit in graph-ui/package-lock.json. Fixed versions: - sharp 0.35.0 -> 0.35.5 (GHSA-wq5f-xc86-pv6w, GHSA-rgj7-g3m4-5g8c): the existing @huggingface/transformers override, bumped. - adm-zip 0.6.0 -> 0.6.1 (GHSA-p634-w6r4-rjp2, GHSA-c6fg-446q-cg94, GHSA-8238-w5pm-2374, GHSA-rcw4-f5rp-g42v, GHSA-j5f4-cc29-5x44, GHSA-7q85-xj36-vmfc, GHSA-vwc7-r8mq-g2x9 whose range ends at 0.6.0): the existing onnxruntime-node override, bumped. - dompurify 3.4.8 -> 3.4.16 (GHSA-6688-9rhm-gjv2, GHSA-55q2-fjhq-7xh7, GHSA-c2j3-45gr-mqc4, GHSA-cmwh-pvxp-8882, GHSA-vxr8-fq34-vvx9): monaco-editor pins it exactly, so a scoped override. - yaml 2.8.2 -> 2.8.3 (GHSA-48c2-rrv3-qjmp): the direct pin. - source-map-js 1.2.1 -> 1.2.2 (GHSA-68fv-2mgg-jv7q): in range under postcss. - sprintf-js <= 1.1.3 (GHSA-hp3w-g68c-fv3c) has no fixed release. Its only path is onnxruntime-node -> global-agent 3 -> roarr 2. global-agent 4.1.3 drops roarr and keeps the CommonJS `bootstrap` export that onnxruntime-node's postinstall calls, so it is overridden under onnxruntime-node and sprintf-js leaves the tree. Lockfile delta: no package added; 7 removed (global-agent 3's private dependencies: boolean, detect-node, es6-error, json-stringify-safe, roarr, semver-compare, sprintf-js); 35 re-versioned (sharp's @img platform packages, the five above, global-agent 4's matcher/serialize-error/ type-fest). Everything resolves from registry.npmjs.org. Proof: `npm ci` with install scripts on, as the product build runs it; onnxruntime-node's postinstall run directly under global-agent 4.1.3 exits 0; the production `vite build` passes; scripts/ci/test-ui.sh (vitest, style gate, promise scan, portable acceptance checks, production build) and scripts/license-gate.sh pass. Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>
94 lines
5.1 KiB
JSON
94 lines
5.1 KiB
JSON
{
|
|
"name": "cbm-lens",
|
|
"version": "0.0.1",
|
|
"private": true,
|
|
"type": "module",
|
|
"description": "Lokales Verstehens-Frontend auf dem CBM-Stack (localhost, air-gapped per Default).",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b tsconfig.json tsconfig.node.json && vite build",
|
|
"test": "node --test tests/scaffold/*.test.mjs",
|
|
"test:acceptance": "node --test tests/scaffold/w*.test.mjs tests/scaffold/release-blockers.test.mjs",
|
|
"test:unit": "vitest run",
|
|
"verify": "node --test tests/scaffold/*.test.mjs",
|
|
"smoke:spike": "node tools/smoke-spike.mjs",
|
|
"smoke:w1": "node tools/smoke-w1.mjs",
|
|
"smoke:w1b": "node tools/smoke-w1b.mjs",
|
|
"smoke:w2a": "node tools/net-deny-gate.mjs --out verification/w2/netdeny.json -- node tools/smoke-w2a.mjs",
|
|
"smoke:w2b": "node tools/net-deny-gate.mjs --out verification/w2/netdeny-w2b.json -- node tools/smoke-w2b.mjs",
|
|
"smoke:w3": "node tools/net-deny-gate.mjs --out verification/w3/netdeny.json -- node tools/smoke-w3.mjs",
|
|
"smoke:w4a": "node tools/net-deny-gate.mjs --out verification/w4/netdeny.json -- node tools/smoke-w4a.mjs",
|
|
"smoke:w4b": "node tools/net-deny-gate.mjs --out verification/w4/netdeny-w4b.json -- node tools/smoke-w4b.mjs",
|
|
"smoke:w4c": "node tools/net-deny-gate.mjs --out verification/w4/netdeny-w4c.json -- node tools/smoke-w4c.mjs",
|
|
"smoke:w4d": "node tools/net-deny-gate.mjs --out verification/w4/netdeny-w4d.json -- node tools/smoke-w4d.mjs",
|
|
"smoke:w4e": "node tools/net-deny-gate.mjs --out verification/w4/netdeny-w4e.json -- node tools/smoke-w4e.mjs",
|
|
"smoke:w5a": "node tools/net-deny-gate.mjs --out verification/w5/netdeny-w5a.json -- node tools/smoke-w5a.mjs",
|
|
"smoke:w5b": "node tools/net-deny-gate.mjs --out verification/w5/netdeny-w5b.json -- node tools/smoke-w5b.mjs",
|
|
"smoke:w5c": "node tools/net-deny-gate.mjs --out verification/w5/netdeny-w5c.json -- node tools/smoke-w5c.mjs",
|
|
"smoke:w6": "node tools/net-deny-gate.mjs --out verification/w6/netdeny.json -- node tools/smoke-w6-full.mjs",
|
|
"smoke:w7a": "node tools/net-deny-gate.mjs --out verification/w7/netdeny.json -- node tools/smoke-w7a.mjs",
|
|
"smoke:w7b": "node tools/net-deny-gate.mjs --out verification/w7/netdeny-w7b.json -- node tools/smoke-w7b.mjs",
|
|
"smoke:w7c": "node tools/net-deny-gate.mjs --out verification/w7/netdeny-w7c.json -- node tools/smoke-w7c.mjs",
|
|
"smoke:w8": "node tools/net-deny-gate.mjs --out verification/w8/netdeny.json -- node tools/smoke-w8.mjs",
|
|
"smoke:w8b": "node tools/net-deny-gate.mjs --out verification/w8b/netdeny.json -- node tools/smoke-w8b.mjs",
|
|
"smoke:w8c": "node tools/net-deny-gate.mjs --out verification/w8c/netdeny.json -- node tools/smoke-w8c.mjs",
|
|
"smoke:w9": "node tools/net-deny-gate.mjs --out verification/w9/netdeny-w9.json -- node tools/smoke-w9.mjs",
|
|
"smoke:w10": "node tools/net-deny-gate.mjs --out verification/w10/netdeny.json -- node tools/smoke-w10.mjs",
|
|
"smoke:w10b": "node tools/net-deny-gate.mjs --out verification/w10b/netdeny.json -- node tools/smoke-w10b.mjs",
|
|
"smoke:w11a": "node tools/net-deny-gate.mjs --out verification/w11/netdeny.json -- node tools/smoke-w11a.mjs",
|
|
"smoke:w11b": "node tools/net-deny-gate.mjs --out verification/w11/netdeny-w11b.json -- node tools/smoke-w11b.mjs",
|
|
"smoke:w12": "node tools/net-deny-gate.mjs --out verification/w12/netdeny.json -- node tools/smoke-w12.mjs",
|
|
"smoke:w12a": "node tools/net-deny-gate.mjs --out verification/w12a/netdeny.json -- node tools/smoke-w12a.mjs",
|
|
"smoke:w13": "node tools/net-deny-gate.mjs --out verification/w13/netdeny.json -- node tools/smoke-w13.mjs",
|
|
"smoke:w14": "node tools/net-deny-gate.mjs --out verification/w14/netdeny.json -- node tools/smoke-w14.mjs",
|
|
"smoke:w15": "node tools/net-deny-gate.mjs --out verification/w15/netdeny.json -- node tools/smoke-w15.mjs",
|
|
"demo:record": "node tools/record-demo.mjs",
|
|
"gate:release": "node tools/release-gate.mjs",
|
|
"check:freshclone": "node tools/freshclone-check.mjs",
|
|
"check:style": "node tools/style-gate.mjs",
|
|
"check:promises": "node tools/promise-scan.mjs",
|
|
"eval:llm": "node tools/eval-llm.mjs",
|
|
"eval:check": "node tools/eval-check.mjs",
|
|
"verify:models": "node tools/verify-models.mjs"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "20.19.43",
|
|
"@types/react": "19.2.18",
|
|
"@types/react-dom": "19.2.5",
|
|
"@types/three": "0.183.1",
|
|
"@vitejs/plugin-react": "4.7.0",
|
|
"jsdom": "25.0.1",
|
|
"monaco-editor": "0.56.0",
|
|
"playwright": "1.62.1",
|
|
"three-stdlib": "2.36.1",
|
|
"typescript": "5.9.3",
|
|
"vite": "6.4.3",
|
|
"vitest": "4.1.11"
|
|
},
|
|
"overrides": {
|
|
"@huggingface/transformers": {
|
|
"sharp": "0.35.5"
|
|
},
|
|
"monaco-editor": {
|
|
"dompurify": "3.4.16"
|
|
},
|
|
"onnxruntime-node@1.24.3": {
|
|
"adm-zip": "0.6.1",
|
|
"global-agent": "4.1.3"
|
|
}
|
|
},
|
|
"dependencies": {
|
|
"@huggingface/transformers": "4.2.0",
|
|
"@react-three/drei": "10.7.7",
|
|
"@react-three/fiber": "9.5.0",
|
|
"@react-three/postprocessing": "3.0.4",
|
|
"postprocessing": "6.38.3",
|
|
"react": "19.2.8",
|
|
"react-dom": "19.2.8",
|
|
"react-markdown": "10.1.0",
|
|
"remark-gfm": "4.0.1",
|
|
"three": "0.183.2",
|
|
"yaml": "2.8.3"
|
|
}
|
|
}
|