rmccorkl_TubeSage/package.json
Richard McCorkle 17d142d9b7 fix: override fast-uri to >=3.1.2 to resolve Dependabot alerts #65 and #66
fast-uri 3.1.0 (transitive via eslint-plugin-obsidianmd → ajv) is
vulnerable to path traversal and host confusion via percent-encoded
segments. Pinned to 3.1.2 via npm overrides.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-09 12:54:02 +02:00

51 lines
1.3 KiB
JSON

{
"name": "tubesage",
"version": "1.2.27",
"description": "Create comprehensive notes from YouTube transcripts using LLMs.",
"main": "main.js",
"scripts": {
"dev": "node esbuild.config.mjs",
"build": "tsc -noEmit -skipLibCheck && node esbuild.config.mjs production",
"deploy": "chmod +x scripts/deploy.sh && ./scripts/deploy.sh",
"lint": "eslint .",
"postbuild": "npm run audit:fallow",
"audit:fallow": "fallow audit --base main",
"graph:update": "graphify . --update"
},
"keywords": [
"obsidian",
"youtube",
"transcript",
"llm",
"templater"
],
"author": "Richard McCorkle",
"license": "MIT",
"devDependencies": {
"@eslint/js": "9.39.4",
"@eslint/json": "0.14.0",
"@types/express": "^5.0.3",
"@types/node": "^24.3.0",
"typescript-eslint": "8.58.2",
"typescript": "^5.9.2",
"tslib": "^2.8.1",
"esbuild": "^0.27.2",
"eslint": "^9.39.2",
"eslint-plugin-no-unsanitized": "4.1.5",
"eslint-plugin-obsidianmd": "0.2.9",
"obsidian": "^1.8.7"
},
"overrides": {
"axios": ">=1.15.0",
"langsmith": "^0.5.18",
"fast-xml-parser": ">=5.7.0",
"uuid": ">=14.0.0",
"fast-uri": ">=3.1.2"
},
"dependencies": {
"@langchain/ollama": "^0.2.0",
"@langchain/openai": "^0.6.7",
"@langchain/core": "^0.3.17",
"hh-mm-ss": "^1.2.0"
}
}