GHSA-p68q-wchp-6fh7 authentication bypass via malformed URLs, header and request validation bypass, request body replacement, find-my-way HTTP/2 DoS. pnpm audit --prod: 8 vulnerabilities before, none after. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
44 lines
1.5 KiB
JSON
44 lines
1.5 KiB
JSON
{
|
|
"name": "heimdall",
|
|
"private": true,
|
|
"type": "module",
|
|
"packageManager": "pnpm@10.33.0",
|
|
"engines": {
|
|
"node": ">=24.0.0"
|
|
},
|
|
"scripts": {
|
|
"build": "tsc -p tsconfig.json",
|
|
"dev": "tsx watch src/index.ts",
|
|
"start": "node dist/index.js",
|
|
"test": "vitest run --config vitest.config.ts",
|
|
"typecheck": "tsc -p tsconfig.json --noEmit",
|
|
"export:provider-health-public-key": "tsx src/export-provider-health-public-key.ts",
|
|
"export:provider-advertisement": "tsx src/export-provider-advertisement.ts --pretty",
|
|
"bundle": "esbuild src/index.ts --bundle --platform=node --format=esm --target=node24 --outfile=dist/heimdall --external:pg-native --banner:js=\"#!/usr/bin/env node\nimport{createRequire}from'node:module';const require=createRequire(import.meta.url);\""
|
|
},
|
|
"dependencies": {
|
|
"@fastify/cors": "^11.2.0",
|
|
"@msgpack/msgpack": "^3.1.3",
|
|
"@gamecult/cultcache-ts": "file:vendor/CultLib/packages/cultcache-ts",
|
|
"cultmesh-ts": "file:vendor/CultLib/packages/cultmesh-ts",
|
|
"cultnet-ts": "file:vendor/CultLib/packages/cultnet-ts",
|
|
"fastify": "^5.12.6",
|
|
"pg": "^8.20.0",
|
|
"zod": "^3.25.76"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^25.6.0",
|
|
"@types/pg": "^8.20.0",
|
|
"pg-mem": "^3.0.14",
|
|
"tsx": "^4.21.0",
|
|
"typescript": "^6.0.3",
|
|
"vitest": "^4.1.5",
|
|
"esbuild": "^0.27.7"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"@gamecult/cultcache-ts": "file:vendor/CultLib/packages/cultcache-ts",
|
|
"cultnet-ts": "file:vendor/CultLib/packages/cultnet-ts"
|
|
}
|
|
}
|
|
}
|