Files
probo/package.json
Sacha Al Himdani 5c71575ade Override lodash to fix security vulnerabilities
Add npm overrides for lodash and lodash-es to force version 4.18.1,
fixing CVE for code injection via _.template and prototype pollution
via _.unset and _.omit.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-02 18:59:31 +02:00

46 lines
958 B
JSON

{
"name": "probo",
"description": "Probo monorepo containing applications and shared packages",
"engines": {
"node": "v24.11.1",
"npm": "11.8.0"
},
"workspaces": [
"apps/*",
"packages/*"
],
"scripts": {
"build": "turbo run build",
"dev": "turbo run dev",
"lint": "turbo run lint",
"check": "turbo run check",
"relay": "turbo run relay"
},
"devDependencies": {
"turbo": "^2.5.3"
},
"graphql": {
"schema": "./pkg/server/api/console/v1/schema.graphql"
},
"overrides": {
"brace-expansion": "^5.0.5",
"minimatch@3": {
"brace-expansion": "^1.1.11"
},
"minimatch@9": "^9.0.9",
"langsmith": "^0.5.0",
"handlebars": "4.7.9",
"@langchain/community": "^1.1.25",
"lodash": "^4.18.1",
"lodash-es": "^4.18.1"
},
"license": "MIT",
"packageManager": "npm@11.8.0",
"volta": {
"node": "24.4.0"
},
"dependencies": {
"react-dom": "^19.2.1"
}
}