jsmorabito_obsidian-commander/package.json
John Morabito 3a9e8a8c3a security: add npm overrides to fix 15 transitive dep vulnerabilities
All affected packages are development dependencies only and do not
affect the compiled plugin that users install.

Overrides added (minimum safe versions):
- ajv: ^6.14.0 (was 6.12.6, ReDoS)
- brace-expansion: ^1.1.13 (was 1.1.11, ReDoS)
- braces: ^3.0.3 (was 3.0.2, uncontrolled resource consumption)
- cross-spawn: ^7.0.5 (was mixed 6/7, ReDoS)
- flatted: ^3.4.2 (was 3.2.7, prototype pollution + DoS)
- immutable: ^4.3.8 (was 4.1.0, prototype pollution)
- js-yaml: ^4.1.1 (was 4.1.0, prototype pollution)
- micromatch: ^4.0.8 (was 4.0.5, ReDoS)
- minimatch: ^3.1.5 (was 3.1.2, ReDoS)
- nanoid: ^3.3.8 (was 3.3.4, predictable output)
- picomatch: ^2.3.2 (was 2.3.1, method injection + ReDoS)
- postcss: ^8.5.10 (was 8.4.20, parsing error + XSS)
- semver: ^7.5.2 (was mixed, ReDoS)
- word-wrap: ^1.2.4 (was 1.2.3, ReDoS)
- yaml: ^1.10.3 (was 1.10.2, stack overflow)
2026-06-04 23:59:10 +00:00

68 lines
2 KiB
JSON

{
"name": "cmdr",
"version": "0.5.4",
"description": "Customize your workspace by adding commands /everywhere/.",
"main": "main.js",
"scripts": {
"dev:esbuild": "node scripts/esbuild.config.mjs",
"build:esbuild": "tsc -noEmit -skipLibCheck && node scripts/esbuild.config.mjs production",
"version": "node scripts/version-bump.mjs && git add manifest.json versions.json",
"icons": "node scripts/update-icon-list.mjs",
"build:css": "npx tailwindcss -i ./main.css -o ./styles.css --minify",
"build": "npm run build:esbuild && npm run build:css",
"dev:css": "npx tailwindcss -i ./main.css -o ./styles.css --watch",
"dev": "npm-run-all --parallel dev:*"
},
"keywords": [],
"author": "jsmorabito & phibr0",
"devDependencies": {
"@codemirror/autocomplete": "^6.3.4",
"@codemirror/commands": "^6.1.2",
"@codemirror/lang-css": "^6.0.1",
"@codemirror/lang-html": "^6.3.1",
"@codemirror/language": "github:lishid/cm-language",
"@codemirror/lint": "^6.1.0",
"@codemirror/search": "^6.2.3",
"@codemirror/state": "^6.1.4",
"@codemirror/view": "^6.6.0",
"@types/canvas-confetti": "^1.6.0",
"@types/node": "^18.11.9",
"@types/react": "^18.0.25",
"@typescript-eslint/eslint-plugin": "^5.45.0",
"@typescript-eslint/parser": "^5.45.0",
"builtin-modules": "^3.3.0",
"codemirror": "^6.0.1",
"codemirror6-themes": "^0.1.2",
"esbuild": "^0.15.16",
"esbuild-plugin-alias": "^0.2.1",
"esbuild-sass-plugin": "^2.4.2",
"node-fetch": "^3.3.0",
"npm-run-all": "^4.1.5",
"obsidian": "latest",
"tailwindcss": "^3.2.4",
"tslib": "^2.4.1",
"typescript": "^4.9.3"
},
"dependencies": {
"array-move": "^4.0.0",
"canvas-confetti": "^1.6.0",
"preact": "^10.11.3"
},
"overrides": {
"ajv": "^6.14.0",
"brace-expansion": "^1.1.13",
"braces": "^3.0.3",
"cross-spawn": "^7.0.5",
"flatted": "^3.4.2",
"immutable": "^4.3.8",
"js-yaml": "^4.1.1",
"micromatch": "^4.0.8",
"minimatch": "^3.1.5",
"nanoid": "^3.3.8",
"picomatch": "^2.3.2",
"postcss": "^8.5.10",
"semver": "^7.5.2",
"word-wrap": "^1.2.4",
"yaml": "^1.10.3"
}
}