Hunter Bown
2e857b09b7
Clears the open Dependabot alerts on `Hmbown/DeepSeek-TUI`:
* GHSA-26hh-7cqf-hhc6 (high) — Next.js App Router middleware /
proxy bypass via segment-prefetch routes; fixed in 15.5.18.
* Four mermaid CVEs (all medium) — Gantt-chart infinite-loop
DoS, `classDef` HTML injection, configuration CSS injection,
`classDefs` CSS injection; fixed in 11.15.0.
Also bumps `eslint-config-next` to 15.5.18 to track the Next.js
release. `npm run build` is clean on the regenerated lockfile.
These are web/ only — the Rust TUI binary doesn't pull in any of
this. Affects the separately-deployed deepseek-tui.com site.
40 lines
1.0 KiB
JSON
40 lines
1.0 KiB
JSON
{
|
|
"name": "deepseek-tui-web",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"description": "Community site for deepseek-tui — deepseek-tui.com",
|
|
"scripts": {
|
|
"dev": "node scripts/derive-facts.mjs && next dev",
|
|
"prebuild": "node scripts/derive-facts.mjs",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "eslint .",
|
|
"preview": "opennextjs-cloudflare preview",
|
|
"predeploy": "node scripts/check-kv-id.mjs",
|
|
"deploy": "opennextjs-cloudflare deploy",
|
|
"cf-typegen": "wrangler types"
|
|
},
|
|
"dependencies": {
|
|
"mermaid": "^11.15.0",
|
|
"next": "^15.5.18",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@opennextjs/cloudflare": "^1.19.7",
|
|
"@types/node": "^22.10.5",
|
|
"@types/react": "^19.0.7",
|
|
"@types/react-dom": "^19.0.3",
|
|
"autoprefixer": "^10.4.20",
|
|
"eslint": "^9.39.4",
|
|
"eslint-config-next": "^15.5.18",
|
|
"postcss": "^8.5.14",
|
|
"tailwindcss": "^3.4.17",
|
|
"typescript": "^5.7.3",
|
|
"wrangler": "^4.86.0"
|
|
},
|
|
"overrides": {
|
|
"postcss": "$postcss"
|
|
}
|
|
}
|