mARTin-B78
114131f9e4
Letzter offener Punkt aus dem Sicherheitsdurchgang vor dem Beta-Test: npm audit
meldete 24 Schwachstellen, davon mehrere kritisch in next und next-auth.
- next 14.2.35 -> 15.5.24 (patcht alles, was next@16 sonst erfordert haette --
ein Major-Sprung statt zwei; next 15 unterstuetzt weiterhin React 18)
- next-auth 4.24.13 -> 4.24.15, @auth/core per overrides auf 0.41.3 erzwungen
(next-auth pinnt es sonst exakt auf die verwundbare 0.34.3, als ungenutzten
optionalen Peer)
- nodemailer 7 -> 10 per overrides (next-auth haelt einen ungenutzten optionalen
Peer auf 7.x)
- postcss auf 8.5.28, auch next's eigene interne Kopie per overrides
- ungenutztes @auth/prisma-adapter entfernt (Projekt nutzt @next-auth/prisma-adapter)
npm audit: 24 -> 0.
Zwei echte Codeaenderungen dafuer noetig:
- Next.js 15: { params } in Routen-Handlern ist jetzt ein Promise. Einzige
betroffene Route: cross-sync/rules/[id].
- nodemailer.Transporter gibt es seit @types/nodemailer 8 nicht mehr als
Namespace-Property, nur noch als benannter Type-Export. Einzige Stelle:
src/lib/email.ts.
Ausserdem google-auth-library als direkte Abhaengigkeit deklariert (vorher nur
ueber googleapis transitiv gehofft) und per overrides auf eine Version gepinnt --
der frische package-lock.json aus den obigen Fixes hob sie sonst nicht mehr
passend, wodurch zwei inkompatible Kopien nebeneinander existierten und der
Typecheck brach.
Verifiziert: Typecheck, Lint, 79 Unit-Tests, Produktions-Build alle gruen.
Login-Seite, Sicherheitsheader und Auth-Middleware manuell im gebauten
Standalone-Server geprueft. Kein Playwright-E2E-Lauf (braucht echte DB/OAuth).
v1.123.0
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
86 lines
2.7 KiB
JSON
86 lines
2.7 KiB
JSON
{
|
|
"name": "my-weekly-todo-list",
|
|
"version": "1.123.0",
|
|
"description": "A web-based weekly task management application that organizes to-dos and calendar events in a single, intuitive weekly view",
|
|
"main": "index.js",
|
|
"scripts": {
|
|
"dev": "echo \"\\n ✦ My Weekly ToDo List v$(node -p \"require('./package.json').version\") — dev mode\\n\" && next dev -H 0.0.0.0 -p 3000",
|
|
"build": "next build",
|
|
"start": "echo \"\\n ✦ My Weekly ToDo List v$(node -p \"require('./package.json').version\") — production\\n\" && next start",
|
|
"lint": "next lint",
|
|
"type-check": "tsc --noEmit",
|
|
"test": "npm run test:unit",
|
|
"test:unit": "node --experimental-strip-types --test tests/unit/*.test.ts",
|
|
"test:e2e": "playwright test",
|
|
"test:e2e:ui": "playwright test --ui",
|
|
"test:debug": "playwright test tests/debug",
|
|
"sonar": "todo-sonar-scan"
|
|
},
|
|
"keywords": [
|
|
"nextjs",
|
|
"todo",
|
|
"calendar",
|
|
"weekly-view",
|
|
"task-management"
|
|
],
|
|
"author": "My Weekly To Do List Team",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@fortawesome/fontawesome-svg-core": "^7.2.0",
|
|
"@fortawesome/free-brands-svg-icons": "^7.2.0",
|
|
"@fortawesome/free-solid-svg-icons": "^7.2.0",
|
|
"@fortawesome/react-fontawesome": "^3.2.0",
|
|
"@mdi/js": "^7.4.47",
|
|
"@mdi/react": "^1.6.1",
|
|
"@next-auth/prisma-adapter": "^1.0.7",
|
|
"@notionhq/client": "^5.14.0",
|
|
"@prisma/client": "5.22.0",
|
|
"@react-pdf/renderer": "^4.4.0",
|
|
"@tiptap/extension-link": "^3.20.0",
|
|
"@tiptap/extension-placeholder": "^3.20.0",
|
|
"@tiptap/extension-underline": "^3.20.0",
|
|
"@tiptap/react": "^3.20.0",
|
|
"@tiptap/starter-kit": "^3.20.0",
|
|
"@types/bcryptjs": "^2.4.6",
|
|
"@types/nodemailer": "^8.0.1",
|
|
"bcryptjs": "^3.0.3",
|
|
"date-fns": "^2.30.0",
|
|
"google-auth-library": "^10.9.1",
|
|
"googleapis": "^170.1.0",
|
|
"ical.js": "^2.2.1",
|
|
"lucide-react": "^0.563.0",
|
|
"next": "15.5.24",
|
|
"next-auth": "^4.24.15",
|
|
"nodemailer": "^10.0.8",
|
|
"postcss-cli": "^11.0.1",
|
|
"prisma": "5.22.0",
|
|
"react": "^18.2.0",
|
|
"react-dnd": "^16.0.1",
|
|
"react-dnd-html5-backend": "^16.0.1",
|
|
"react-dom": "^18.2.0",
|
|
"tsdav": "^2.1.8",
|
|
"web-push": "^3.6.7",
|
|
"zustand": "^4.4.0"
|
|
},
|
|
"overrides": {
|
|
"@auth/core": "0.41.3",
|
|
"nodemailer": "^10.0.8",
|
|
"next": {
|
|
"postcss": "^8.5.28"
|
|
},
|
|
"google-auth-library": "^10.9.1"
|
|
},
|
|
"devDependencies": {
|
|
"@playwright/test": "^1.58.0",
|
|
"@types/node": "^20.0.0",
|
|
"@types/react": "^18.2.0",
|
|
"@types/react-dom": "^18.2.0",
|
|
"autoprefixer": "^10.4.19",
|
|
"eslint": "^8.0.0",
|
|
"eslint-config-next": "15.5.24",
|
|
"postcss": "^8.5.28",
|
|
"tailwindcss": "^3.4.1",
|
|
"typescript": "^5.0.0"
|
|
}
|
|
}
|