chris
803ed2a988
Vite 5 pulled esbuild 0.21.5 — the only source of the GHSA-67mh-4wv8-2f99 dev-server advisory. Vite 6.4 (esbuild 0.25) runs on the current Node baseline and clears it: `npm audit` now reports 0 vulnerabilities. - vite 5.4 → 6.4, vite-plugin-pwa 0.21 → 1.3 (needs Vite 6+). - Removed `ws` from devDependencies — it was only used by throwaway test scripts, never the app or build. - Build, all 14 routes, and the service worker verified on Vite 6. - SECURITY.md / AGENTS.md updated. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017Ve7HLspzeG2xDPtJQ8vmu
31 lines
799 B
JSON
31 lines
799 B
JSON
{
|
|
"name": "pocketdex",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"description": "An offline-first Pokédex, team builder and save-file tracker powered by PokéAPI. Vanilla JS + Vite + Workbox.",
|
|
"scripts": {
|
|
"snapshot": "node scripts/build-snapshot.mjs",
|
|
"prebuild": "node scripts/build-snapshot.mjs",
|
|
"dev": "vite",
|
|
"build": "vite build",
|
|
"preview": "vite preview"
|
|
},
|
|
"engines": {
|
|
"node": ">=20"
|
|
},
|
|
"license": "MIT",
|
|
"devDependencies": {
|
|
"vite": "^6.4.3",
|
|
"vite-plugin-pwa": "^1.3.0"
|
|
},
|
|
"dependencies": {
|
|
"workbox-cacheable-response": "^7.4.1",
|
|
"workbox-expiration": "^7.4.1",
|
|
"workbox-precaching": "^7.4.1",
|
|
"workbox-routing": "^7.4.1",
|
|
"workbox-strategies": "^7.4.1",
|
|
"workbox-window": "^7.4.1"
|
|
}
|
|
}
|