mARTin-B78
3742ae52c6
Sicherheitsdurchgang vor dem geplanten Beta-Test mit Security-Scannern: - Login (authorize() in src/lib/auth.ts) hatte als einziger Auth-Endpunkt kein Rate-Limit, obwohl signup/reset-password/verify-email/resend-verification es bereits nutzen. Jetzt max. 8 Versuche pro E-Mail in 15 Minuten. - Fehlende Standardheader ergaenzt (X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy), X-Powered-By abgeschaltet. Bewusst ohne CSP -- braucht eine eigene, getestete Whitelist fuer OAuth/Fonts/CDN. - npm audit fix (ohne --force): 24 -> 10 gemeldete Schwachstellen, keine Breaking Changes. Die verbleibenden 10 haengen an next@14 und next-auth@4 (siehe CHANGELOG "Known issues") und brauchen ein eigenes Major-Upgrade. Ausserdem zwei Betriebsfixes, die beim heutigen Deploy live auffielen: - scripts/update-app.sh setzt jetzt selbst PATH=/usr/local/bin:$PATH. Ohne Login-Shell fand es pm2 nicht und brach nach erfolgreichem Build beim Neustart ab -- die Instanz blieb dabei auf dem alten Stand, kein Datenverlust, aber ein unnoetiger manueller Eingriff. - tsconfig.json nimmt .next-build/types/**/*.ts mit auf; Next.js traegt das beim Bauen mit NEXT_DIST_DIR=.next-build sonst als nie eingecheckte Abweichung auf dem Produktionshost ein. v1.122.0 Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
78 lines
2.5 KiB
JSON
78 lines
2.5 KiB
JSON
{
|
|
"name": "my-weekly-todo-list",
|
|
"version": "1.122.0",
|
|
"description": "A web-based weekly task management application that organizes to-dos and calendar events in a single, intuitive weekly view",
|
|
"main": "index.js",
|
|
"scripts": {
|
|
"dev": "echo \"\\n ✦ My Weekly ToDo List v$(node -p \"require('./package.json').version\") — dev mode\\n\" && next dev -H 0.0.0.0 -p 3000",
|
|
"build": "next build",
|
|
"start": "echo \"\\n ✦ My Weekly ToDo List v$(node -p \"require('./package.json').version\") — production\\n\" && next start",
|
|
"lint": "next lint",
|
|
"type-check": "tsc --noEmit",
|
|
"test": "npm run test:unit",
|
|
"test:unit": "node --experimental-strip-types --test tests/unit/*.test.ts",
|
|
"test:e2e": "playwright test",
|
|
"test:e2e:ui": "playwright test --ui",
|
|
"test:debug": "playwright test tests/debug",
|
|
"sonar": "todo-sonar-scan"
|
|
},
|
|
"keywords": [
|
|
"nextjs",
|
|
"todo",
|
|
"calendar",
|
|
"weekly-view",
|
|
"task-management"
|
|
],
|
|
"author": "My Weekly To Do List Team",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@auth/prisma-adapter": "^2.11.1",
|
|
"@fortawesome/fontawesome-svg-core": "^7.2.0",
|
|
"@fortawesome/free-brands-svg-icons": "^7.2.0",
|
|
"@fortawesome/free-solid-svg-icons": "^7.2.0",
|
|
"@fortawesome/react-fontawesome": "^3.2.0",
|
|
"@mdi/js": "^7.4.47",
|
|
"@mdi/react": "^1.6.1",
|
|
"@next-auth/prisma-adapter": "^1.0.7",
|
|
"@notionhq/client": "^5.14.0",
|
|
"@prisma/client": "5.22.0",
|
|
"@react-pdf/renderer": "^4.4.0",
|
|
"@tiptap/extension-link": "^3.20.0",
|
|
"@tiptap/extension-placeholder": "^3.20.0",
|
|
"@tiptap/extension-underline": "^3.20.0",
|
|
"@tiptap/react": "^3.20.0",
|
|
"@tiptap/starter-kit": "^3.20.0",
|
|
"@types/bcryptjs": "^2.4.6",
|
|
"@types/nodemailer": "^7.0.11",
|
|
"bcryptjs": "^3.0.3",
|
|
"date-fns": "^2.30.0",
|
|
"googleapis": "^170.1.0",
|
|
"ical.js": "^2.2.1",
|
|
"lucide-react": "^0.563.0",
|
|
"next": "14.2.35",
|
|
"next-auth": "^4.24.13",
|
|
"nodemailer": "^7.0.13",
|
|
"postcss-cli": "^11.0.1",
|
|
"prisma": "5.22.0",
|
|
"react": "^18.2.0",
|
|
"react-dnd": "^16.0.1",
|
|
"react-dnd-html5-backend": "^16.0.1",
|
|
"react-dom": "^18.2.0",
|
|
"tsdav": "^2.1.8",
|
|
"web-push": "^3.6.7",
|
|
"zustand": "^4.4.0"
|
|
},
|
|
"devDependencies": {
|
|
"@playwright/test": "^1.58.0",
|
|
"@types/node": "^20.0.0",
|
|
"@types/react": "^18.2.0",
|
|
"@types/react-dom": "^18.2.0",
|
|
"autoprefixer": "^10.4.19",
|
|
"eslint": "^8.0.0",
|
|
"eslint-config-next": "^14.0.0",
|
|
"postcss": "^8.4.38",
|
|
"tailwindcss": "^3.4.1",
|
|
"typescript": "^5.0.0"
|
|
}
|
|
}
|