Files
Wabenhain/package.json
T
Nick SzaunigandClaude Opus 5 c50e5e0e08 fix: alle 14 bekannten Schwachstellen in Produktionsabhaengigkeiten schliessen
"pnpm audit --prod" meldete 14 Advisories, davon 2 kritisch. Danach: keine.

Direkte Abhaengigkeiten angehoben:
- next 16.3.0 -> 16.3.5        (2x KRITISCH, gepatcht ab 16.3.3)
- eslint-config-next entsprechend
- nodemailer ^9.0.5 -> ^9.1.1  (HIGH + MODERATE: Empfaengerdomain liess sich
                                ueber falsch geparste RFC-5322-Kommentare
                                umbiegen — betrifft jede Transaktionsmail)
- sharp ^0.35.3 -> ^0.35.4     (HIGH)
- prisma/@prisma/client und beide Adapter ^7.9.1 -> ^7.10.0

Drei verbleibende Advisories liessen sich nur transitiv unter der
prisma-CLI aufloesen, deshalb als Overrides in pnpm-workspace.yaml
(dieselbe Stelle und dasselbe Muster wie die bereits vorhandenen
nanoid-/mariadb-Eintraege): mysql2 >=3.23.1, fast-uri >=3.1.6,
deepmerge-ts >=8.0.0.

deepmerge-ts ist ein Hauptversionssprung und haengt unter @prisma/config —
also genau im Pfad von "prisma migrate deploy", das der Container laut
Dockerfile-CMD bei JEDEM Start ausfuehrt. Deshalb nach dem Anheben
"prisma validate" und "prisma generate" (beide Provider) geprueft, dazu
Typecheck, Lint, 206 Tests und ein vollstaendiger Produktions-Build.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
2026-09-15 10:01:25 +02:00

69 lines
2.1 KiB
JSON

{
"name": "wabenhain",
"version": "0.1.0",
"private": true,
"scripts": {
"dev": "node scripts/generate-prisma-clients.mjs && next dev",
"build": "node scripts/generate-prisma-clients.mjs && next build",
"start": "node scripts/generate-prisma-clients.mjs && next start",
"lint": "eslint",
"postinstall": "node scripts/generate-prisma-clients.mjs",
"db:push": "node scripts/prisma-provider.mjs && prisma db push",
"db:migrate": "node scripts/prisma-provider.mjs && prisma migrate dev",
"db:deploy": "node scripts/prisma-provider.mjs && prisma migrate deploy",
"db:seed": "prisma db seed",
"db:seed:demo": "tsx prisma/seed-demo.ts",
"db:studio": "node scripts/prisma-provider.mjs && prisma studio",
"test": "vitest run",
"test:watch": "vitest",
"test:e2e": "playwright test",
"preflight": "node scripts/preflight.mjs"
},
"dependencies": {
"@prisma/adapter-mariadb": "^7.10.0",
"@prisma/adapter-pg": "^7.10.0",
"@prisma/client": "^7.10.0",
"bcryptjs": "^3.0.3",
"ffmpeg-static": "^5.3.0",
"jose": "^6.2.8",
"mariadb": "^3.5.3",
"motion": "^13.0.0",
"next": "16.3.5",
"nodemailer": "^9.1.1",
"otpauth": "^9.5.1",
"pdfkit": "^0.19.1",
"prisma": "^7.10.0",
"qrcode": "^1.5.4",
"react": "19.2.8",
"react-dom": "19.2.8",
"sharp": "^0.35.4",
"stripe": "^22.4.0",
"zod": "^4.4.3",
"zustand": "^5.0.14"
},
"devDependencies": {
"@playwright/test": "^1.62.1",
"@tailwindcss/postcss": "^4",
"@testing-library/jest-dom": "^7.0.1",
"@testing-library/react": "^16.3.2",
"@testing-library/user-event": "^14.6.4",
"@types/bcryptjs": "^3.0.0",
"@types/node": "^20.19.43",
"@types/nodemailer": "^8.0.1",
"@types/pdfkit": "^0.17.6",
"@types/qrcode": "^1.5.6",
"@types/react": "^19",
"@types/react-dom": "^19",
"@vitejs/plugin-react": "^6.0.5",
"dotenv": "^17.4.2",
"eslint": "^9",
"eslint-config-next": "16.3.5",
"jsdom": "^30.0.1",
"tailwindcss": "^4",
"tsx": "^4",
"typescript": "^5",
"vitest": "^4.1.10"
},
"packageManager": "[email protected]"
}