Files
deepagentsjs/package.json
John Kennedy 79e4654efa fix(deps): resolve Dependabot alerts (#710)
## Summary
- pin `axios` to 1.18.0 for eight open advisories
- pin `protobufjs` 7.x to 7.6.5
- pin `@opentelemetry/propagator-jaeger` to 2.9.0
- pin `js-yaml` 4.x to 4.3.0
- regenerate the pnpm lockfile

## Verification
- `pnpm install --frozen-lockfile` passed
- `git diff --check` passed
- confirmed vulnerable lockfile versions were removed
- `pnpm format:check` blocked by a missing
`@oxfmt/binding-linux-x64-gnu` optional native binding in this Node 18
sandbox
- `pnpm typecheck` reached existing missing
`@langchain/sandbox-standard-tests/vitest` declarations in integration
tests
- `pnpm audit --prod` reports the separate known `node-vfs-polyfill`
malware advisory, which has no patched version and is not among the open
Dependabot alerts addressed here

Co-authored-by: John Kennedy <john@users.noreply.github.com>
2026-07-25 13:57:37 -07:00

91 lines
3.2 KiB
JSON

{
"name": "deepagentsjs-monorepo",
"version": "0.0.0",
"private": true,
"description": "Deep Agents - a library for building controllable AI agents with LangGraph",
"type": "module",
"scripts": {
"build": "pnpm --filter \"./libs/*\" --filter \"./libs/providers/*\" build",
"clean": "pnpm --filter \"./libs/*\" clean",
"typecheck": "pnpm --filter \"./libs/*\" typecheck",
"lint": "oxlint",
"lint:fix": "oxlint --fix",
"format": "oxfmt",
"format:check": "oxfmt --check",
"test": "pnpm format:check && pnpm lint && pnpm --filter \"./libs/*\" test",
"test:unit": "pnpm --filter \"./libs/*\" test:unit",
"test:int": "pnpm --filter \"./libs/*\" --filter \"./libs/providers/*\" test:int",
"test:watch": "pnpm --filter \"./libs/*\" test:watch",
"test:coverage": "pnpm --filter \"./libs/*\" test:coverage",
"changeset:version": "changeset version",
"release": "pnpm build && changeset publish"
},
"homepage": "https://docs.langchain.com/oss/javascript/deepagents",
"repository": {
"type": "git",
"url": "git+https://github.com/langchain-ai/deepagentsjs.git"
},
"keywords": [
"ai",
"agents",
"langgraph",
"langchain",
"typescript",
"llm"
],
"author": "LangChain",
"license": "MIT",
"bugs": {
"url": "https://github.com/langchain-ai/deepagentsjs/issues"
},
"devDependencies": {
"@changesets/changelog-github": "^0.7.0",
"@changesets/cli": "^2.29.8",
"@tsconfig/recommended": "^1.0.13",
"dotenv": "^17.4.2",
"eslint-plugin-no-instanceof": "^1.0.1",
"globals": "^17.3.0",
"jiti": "^2.6.1",
"lint-staged": "^17.0.7",
"oxfmt": "^0.60.0",
"oxlint": "^1.57.0",
"tsx": "^4.21.0",
"typescript": "^7.0.2"
},
"lint-staged": {
"*.{js,jsx,ts,tsx,mjs,cjs}": "pnpm run lint",
"*": "pnpm run format --no-error-on-unmatched-pattern"
},
"packageManager": "pnpm@10.29.2",
"pnpm": {
"overrides": {
"minimatch@<3.1.4": "3.1.4",
"minimatch@>=9 <10.2.1": "10.2.4",
"fast-xml-parser@>=4.0.0-beta.3 <=5.5.6": "5.5.10",
"rollup@>=4.0.0 <4.59.0": "4.59.0",
"lodash@<=4.17.23": "4.18.1",
"picomatch@<2.3.2": "2.3.2",
"picomatch@>=4.0.0 <4.0.4": "4.0.4",
"flatted@<3.4.2": "3.4.2",
"protobufjs@<8.0.0": "7.6.5",
"protobufjs@>=8.0.0 <8.6.0": "8.6.0",
"axios@<1.18.0": "1.18.0",
"@opentelemetry/core@<2.8.0": "2.8.0",
"@opentelemetry/propagator-jaeger@<2.9.0": "2.9.0",
"js-yaml@<3.15.0": "3.15.0",
"js-yaml@>=4.0.0 <4.3.0": "4.3.0",
"follow-redirects@<1.16.0": "1.16.0",
"es-define-property": "npm:@socketregistry/es-define-property@^1",
"es-set-tostringtag": "npm:@socketregistry/es-set-tostringtag@^1",
"function-bind": "npm:@socketregistry/function-bind@^1",
"gopd": "npm:@socketregistry/gopd@^1",
"has-symbols": "npm:@socketregistry/has-symbols@^1",
"has-tostringtag": "npm:@socketregistry/has-tostringtag@^1",
"hasown": "npm:@socketregistry/hasown@^1",
"safe-buffer": "npm:@socketregistry/safe-buffer@^1",
"safer-buffer": "npm:@socketregistry/safer-buffer@^1",
"shell-quote": "npm:shell-quote@^1"
}
}
}