Add npm overrides for lodash and lodash-es to force version 4.18.1, fixing CVE for code injection via _.template and prototype pollution via _.unset and _.omit. Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
46 lines
958 B
JSON
46 lines
958 B
JSON
{
|
|
"name": "probo",
|
|
"description": "Probo monorepo containing applications and shared packages",
|
|
"engines": {
|
|
"node": "v24.11.1",
|
|
"npm": "11.8.0"
|
|
},
|
|
"workspaces": [
|
|
"apps/*",
|
|
"packages/*"
|
|
],
|
|
"scripts": {
|
|
"build": "turbo run build",
|
|
"dev": "turbo run dev",
|
|
"lint": "turbo run lint",
|
|
"check": "turbo run check",
|
|
"relay": "turbo run relay"
|
|
},
|
|
"devDependencies": {
|
|
"turbo": "^2.5.3"
|
|
},
|
|
"graphql": {
|
|
"schema": "./pkg/server/api/console/v1/schema.graphql"
|
|
},
|
|
"overrides": {
|
|
"brace-expansion": "^5.0.5",
|
|
"minimatch@3": {
|
|
"brace-expansion": "^1.1.11"
|
|
},
|
|
"minimatch@9": "^9.0.9",
|
|
"langsmith": "^0.5.0",
|
|
"handlebars": "4.7.9",
|
|
"@langchain/community": "^1.1.25",
|
|
"lodash": "^4.18.1",
|
|
"lodash-es": "^4.18.1"
|
|
},
|
|
"license": "MIT",
|
|
"packageManager": "npm@11.8.0",
|
|
"volta": {
|
|
"node": "24.4.0"
|
|
},
|
|
"dependencies": {
|
|
"react-dom": "^19.2.1"
|
|
}
|
|
}
|