docfast/package.json
OpenClaw Subagent 14181d17a7
Some checks failed
Build & Deploy to Staging / Build & Deploy to Staging (push) Has been cancelled
fix: override yauzl to 3.2.1 to resolve moderate vulnerability
yauzl <3.2.1 has an off-by-one error (GHSA-gmq8-994r-jv83).
Transitive dependency via puppeteer → @puppeteer/browsers → extract-zip.
npm overrides pins yauzl@3.2.1 without changing puppeteer version.
npm audit now reports 0 vulnerabilities.
2026-03-14 08:02:50 +01:00

48 lines
1.3 KiB
JSON

{
"name": "docfast-api",
"version": "0.5.2",
"description": "Markdown/HTML to PDF API with built-in invoice templates",
"main": "dist/index.js",
"scripts": {
"build:pages": "node scripts/build-html.cjs",
"build": "node scripts/generate-openapi.mjs && npm run build:pages && tsc",
"start": "node dist/index.js",
"dev": "tsx src/index.ts",
"test": "vitest run",
"generate-openapi": "node scripts/generate-openapi.mjs"
},
"dependencies": {
"compression": "^1.8.1",
"express": "^5.1.0",
"express-rate-limit": "^8.3.1",
"helmet": "^8.1.0",
"marked": "^17.0.4",
"nanoid": "^5.1.6",
"nodemailer": "^8.0.2",
"pg": "^8.20.0",
"pino": "^10.3.1",
"puppeteer": "^24.39.1",
"stripe": "^20.4.1",
"swagger-jsdoc": "^6.2.8",
"swagger-ui-dist": "^5.32.0"
},
"devDependencies": {
"@types/compression": "^1.8.1",
"@types/express": "^5.0.6",
"@types/node": "^25.5.0",
"@types/nodemailer": "^7.0.11",
"@types/pg": "^8.18.0",
"@types/supertest": "^7.2.0",
"@types/swagger-jsdoc": "^6.0.4",
"@vitest/coverage-v8": "^4.1.0",
"supertest": "^7.2.2",
"terser": "^5.46.0",
"tsx": "^4.21.0",
"typescript": "^5.9.3",
"vitest": "^4.1.0"
},
"type": "module",
"overrides": {
"yauzl": "3.2.1"
}
}