Files
Kevin Codex d2f651452b fix(deps): minimatch 11.0.5 for typescript-eslint (GHSA-g3hv-75wg-m249)
minimatch >= 7.0.0, < 11.0.1 can be driven into a denial of service through
globparts amplification. The tree held minimatch 10.2.6 under
@typescript-eslint/typescript-estree (eslint-config-next → typescript-eslint),
lint tooling only, never shipped. No typescript-eslint release depends on
minimatch 11 yet (8.72.1 still asks for ^10.2.2), so a scoped npm override
pins it to ^11.0.1 for that package alone; eslint's own minimatch 3.1.5 is
outside the range and stays. minimatch 11 keeps the CommonJS export the
parser requires, and adds @isaacs/nonrecursive-glob-match (same maintainer).

npm audit (all deps): 8 moderate → 0. Signatures, lint, tsc, 1372 tests and
the production build pass.
2026-11-06 12:32:11 +08:00

55 lines
1.4 KiB
JSON

{
"name": "openlaunch",
"version": "0.1.0",
"private": true,
"scripts": {
"dev": "next dev",
"build": "next build",
"start": "next start",
"lint": "eslint",
"typecheck": "tsc --noEmit",
"test": "tsx --conditions=react-server --tsconfig tsconfig.test.json --test \"src/**/*.test.ts\"",
"migrate": "node scripts/migrate.mjs"
},
"dependencies": {
"@aws-sdk/client-s3": "^3.1127.0",
"@base-ui/react": "^1.8.0",
"@coinbase/wallet-sdk": "^4.3.7",
"@number-flow/react": "^0.6.2",
"@tanstack/react-query": "^5.91.3",
"clsx": "^2.1.1",
"d3-force": "^3.0.0",
"lightweight-charts": "^5.2.1",
"lucide-react": "^1.42.0",
"motion": "^13.2.0",
"next": "^16.4.5",
"next-themes": "^0.4.6",
"postgres": "^3.4.9",
"react": "19.2.3",
"react-dom": "19.2.3",
"server-only": "^0.0.1",
"sharp": "^0.35.5",
"tailwind-merge": "^3.6.0",
"viem": "^2.47.6",
"wagmi": "^3.5.0"
},
"devDependencies": {
"@tailwindcss/postcss": "^4",
"@types/d3-force": "^3.0.10",
"@types/node": "^20",
"@types/react": "^19",
"@types/react-dom": "^19",
"eslint": "^9",
"eslint-config-next": "^16.4.5",
"tailwindcss": "^4",
"tsx": "^4.23.13",
"typescript": "^5"
},
"overrides": {
"use-sync-external-store": "^1.4.0",
"@typescript-eslint/typescript-estree": {
"minimatch": "^11.0.1"
}
}
}