Files
probo/package.json
Sacha Al Himdani bfed192421 Upgrade axios to 1.15.0 via npm override
Fixes GitHub security alerts #82, #83, #84:
- Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
- NO_PROXY Hostname Normalization Bypass leading to SSRF
- Prototype Pollution in langsmith-sdk

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-13 14:24:51 +02:00

47 lines
982 B
JSON

{
"name": "probo",
"description": "Probo monorepo containing applications and shared packages",
"engines": {
"node": "v24.11.1",
"npm": "11.8.0"
},
"workspaces": [
"apps/*",
"packages/*"
],
"scripts": {
"build": "turbo run build",
"dev": "turbo run dev",
"lint": "turbo run lint",
"check": "turbo run check",
"relay": "turbo run relay"
},
"devDependencies": {
"turbo": "^2.5.3"
},
"graphql": {
"schema": "./pkg/server/api/console/v1/schema.graphql"
},
"overrides": {
"brace-expansion": "^5.0.5",
"minimatch@3": {
"brace-expansion": "^1.1.11"
},
"minimatch@9": "^9.0.9",
"langsmith": "^0.5.0",
"handlebars": "4.7.9",
"@langchain/community": "^1.1.25",
"lodash": "^4.18.1",
"lodash-es": "^4.18.1",
"axios": "^1.15.0"
},
"license": "MIT",
"packageManager": "npm@11.8.0",
"volta": {
"node": "24.4.0"
},
"dependencies": {
"react-dom": "^19.2.1"
}
}