veritas-kanban/cli/package.json
Brad Groux 0c0f5b344d security+quality: final codebase review fixes
Security (critical):
- Remove shell:true from preview-service spawn (command injection fix)
- Replace exec() with execFile() in github-service (no shell interpolation)
- Add SIGKILL fallback after SIGTERM timeout in worktree-service

Stability:
- Add process cleanup handlers (SIGTERM/SIGINT) for preview servers
- Add MAX_PREVIEW_SERVERS=5 limit to prevent resource exhaustion
- Memoize WebSocket context value to prevent unnecessary re-renders

Code quality:
- Remove hardcoded 'Brad' author → 'User' (3 files)
- Replace hardcoded localhost:3001 URLs with API_BASE (AttachmentsSection)
- Fix SECURITY-AUDIT.md date (2025 → 2026)
- Add license/repository/author to all 6 package.json files

Data hygiene:
- Untrack all runtime data files (.veritas-kanban/*.json, telemetry, activity)
- Simplify .gitignore: .veritas-kanban/* except .gitkeep
- Removed ~15,700 lines of runtime data from git history
2026-01-29 06:13:10 -06:00

30 lines
683 B
JSON

{
"name": "@veritas-kanban/cli",
"version": "1.0.0",
"description": "CLI for Veritas Kanban task management",
"type": "module",
"bin": {
"vk": "./dist/index.js"
},
"scripts": {
"build": "tsc",
"dev": "tsx src/index.ts",
"typecheck": "tsc --noEmit"
},
"dependencies": {
"@veritas-kanban/shared": "workspace:*",
"commander": "^12.1.0",
"chalk": "^5.3.0"
},
"devDependencies": {
"@types/node": "^22.10.0",
"typescript": "^5.7.0",
"tsx": "^4.19.0"
},
"license": "MIT",
"author": "Brad Groux <brad@digitalmeld.io>",
"repository": {
"type": "git",
"url": "https://github.com/BradGroux/veritas-kanban.git"
}
}