From f7c070e45b249520c89930f443895df6f5a3f073 Mon Sep 17 00:00:00 2001
From: Kurdistan Tech Ministry <info@pezkuwichain.io>
Date: Sat, 9 May 2026 12:27:07 +0300
Subject: [PATCH] fix(deps): drop invalid create-ecdh override (max version is
 4.x not 5.x)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The earlier npm override 'create-ecdh: ^5.0.1' resolved to no version on
the registry. CI install failed with ETARGET. Removing the override —
elliptic override alone covers the high-severity transitive vulns.
Remaining 6 lows in vite-plugin-node-polyfills chain accepted.
---
 web/package.json | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/web/package.json b/web/package.json
index a31c7f0d..17307b1c 100644
--- a/web/package.json
+++ b/web/package.json
@@ -121,8 +121,7 @@
     "@pezkuwi/x-textencoder": "^14.0.25",
     "@pezkuwi/x-ws": "^14.0.25",
     "@pezkuwi/networks": "^14.0.25",
-    "elliptic": "^6.6.1",
-    "create-ecdh": "^5.0.1"
+    "elliptic": "^6.6.1"
   },
   "devDependencies": {
     "@eslint/js": "^9.9.0",