Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 13 additions & 13 deletions frontend/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion frontend/package.json
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{

Check warning on line 1 in frontend/package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning

Artifact "lodash" 4.17.21 is vulnerable to CVE-2025-13465 - Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions. Vulnerability score: 6.5 (medium).

Check failure on line 1 in frontend/package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error

Artifact "qs" 6.14.0 is vulnerable to CVE-2025-15284 - qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion. Vulnerability score: 7.5 (high).
"name": "turning-wheel-frontend",
"version": "1.0.0",
"description": "React frontend for The Turning Wheel with end-to-end encryption",
Expand All @@ -18,7 +18,7 @@
"test": "vitest",
"test:ui": "vitest --ui",
"test:coverage": "vitest --coverage",
"storybook": "storybook dev -p 6006",

Check failure on line 21 in frontend/package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Error

Artifact "storybook" 9.1.3 is vulnerable to CVE-2025-68429 - Storybook manager bundle may expose environment variables during build. Vulnerability score: 7.3 (high).
"build-storybook": "storybook build",
"security:audit": "npm audit",
"analyze": "npm run build && npx vite-bundle-analyzer dist"
Expand All @@ -26,7 +26,7 @@
"dependencies": {
"react": "^18.2.0",
"react-dom": "^18.2.0",
"react-router-dom": "^6.20.1",
"react-router-dom": "^6.30.3",
"react-query": "^3.39.3",
"@tanstack/react-query": "^5.12.2",
"zustand": "^4.4.7",
Expand Down Expand Up @@ -76,7 +76,7 @@
"@testing-library/react": "^13.4.0",
"@testing-library/jest-dom": "^6.1.5",
"@testing-library/user-event": "^14.5.1",
"eslint": "^8.54.0",

Check warning on line 79 in frontend/package.json

View check run for this annotation

Codeac.io / Codeac Code Quality

NPM Vulnerability Warning

Artifact "eslint" 8.57.1 is vulnerable to GHSA-p5wg-g6qr-c7cg - eslint has a Stack Overflow when serializing objects with circular references. Vulnerability score: 5.5 (medium).
"eslint-plugin-react": "^7.33.2",
"eslint-plugin-react-hooks": "^4.6.0",
"eslint-plugin-react-refresh": "^0.4.4",
Expand Down
Loading