claude-prism/package.json
delibae 03bec2ac2b fix: resolve Dependabot security alerts for undici, flatted, and hono
Add pnpm overrides to bump transitive dependencies to patched versions:
- undici >=7.24.0 (fixes CVEs for WebSocket, CRLF injection, request smuggling)
- flatted >=3.4.0 (fixes unbounded recursion DoS)
- hono >=4.12.7 (fixes prototype pollution via __proto__)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-15 00:07:07 +09:00

39 lines
1.1 KiB
JSON

{
"name": "@claude-prism/root",
"description": "Open-Source AI LaTeX writing workspace",
"version": "1.0.0",
"repository": {
"type": "git",
"url": "https://github.com/delibae/claude-prism"
},
"private": true,
"workspaces": [
"apps/*",
"packages/*"
],
"scripts": {
"dev:web": "pnpm turbo dev --filter=@claude-prism/web --filter=@claude-prism/latex-api",
"dev:desktop": "pnpm --filter=@claude-prism/desktop-sidecar dev & pnpm --filter=@claude-prism/desktop tauri dev",
"build:desktop": "pnpm --filter=@claude-prism/desktop tauri build",
"lint": "pnpm exec biome check",
"lint:fix": "pnpm exec biome check --fix",
"release": "echo 'To release: git tag v<version> && git push origin v<version>'"
},
"devDependencies": {
"@biomejs/biome": "^2.3.13",
"turbo": "^2.7.6"
},
"packageManager": "pnpm@10.28.2",
"pnpm": {
"onlyBuiltDependencies": [
"esbuild"
],
"overrides": {
"rollup": ">=4.58.0",
"serialize-javascript": ">=6.0.3",
"undici": ">=7.24.0",
"flatted": ">=3.4.0",
"hono": ">=4.12.7"
}
}
}