mirror of
https://github.com/pezkuwichain/pwap.git
synced 2026-07-26 10:55:41 +00:00
27b4057bd4
Audit remediation (build/supply-chain/quality):
- Add `@pezkuwi/api-augment` import in main.tsx -> tsc errors 416->328 (Codec-typed
on-chain reads now augmented); add `typecheck` script + a non-blocking Typecheck CI
step (flip to blocking once errors reach 0).
- CI: `npm install` -> `npm ci` (lockfile enforced) in web + security-audit jobs; add a
Backend Indexer job (npm ci + node --check + non-blocking high/critical audit). No
live tests run in CI (they need a live chain) — a mockable CI test subset is a
follow-up.
- Vulns: bump dompurify ^3.4.12 + postcss ^8.5.23 (web prod highs cleared; only the
react-router v7 open-redirect remains, deferred as a breaking major); backend tar
^7.5.22 + ws ^8.21.1 (clears the critical tar advisory). Lockfiles regenerated.
- Prod build now drops console/debugger (vite esbuild.drop); NotificationBell realtime
subscription now returns cleanup + uses a per-user channel (fixes leak); ProfileSettings
language codes aligned to i18n config (ku-kurmanji/ku-sorani).
- Root package.json sdk-ui path env-driven (${SDK_UI_DIR}); generate-docs rustup path
resolved dynamically; Docker image license label MIT (matches LICENSE). Removed scratch
files (mimari.txt, _scratch_credit_serok.mjs).
32 lines
1.6 KiB
JSON
32 lines
1.6 KiB
JSON
{
|
|
"name": "pwap",
|
|
"version": "1.0.0",
|
|
"private": true,
|
|
"description": "Pezkuwi Web App Projects - Monorepo",
|
|
"scripts": {
|
|
"build": "npm run build:web && npm run build:sdk-ui && npm run build:mobile",
|
|
"build:web": "cd web && npm run build",
|
|
"build:sdk-ui": "cd \"${SDK_UI_DIR:-../pezkuwi-sdk-ui}\" 2>/dev/null && yarn build || echo 'sdk-ui: skipped (set SDK_UI_DIR to the pezkuwi-sdk-ui checkout to enable)'",
|
|
"build:mobile": "cd mobile && npx expo export --platform web",
|
|
"build:parallel": "concurrently \"npm run build:web\" \"npm run build:sdk-ui\"",
|
|
"dev": "concurrently \"npm run dev:web\" \"npm run dev:mobile\"",
|
|
"dev:web": "cd web && npm run dev",
|
|
"dev:sdk-ui": "cd \"${SDK_UI_DIR:-../pezkuwi-sdk-ui}\" && yarn start",
|
|
"dev:mobile": "cd mobile && npm run dev",
|
|
"install:all": "npm run install:web && npm run install:sdk-ui && npm run install:mobile && npm run install:backend",
|
|
"install:web": "cd web && npm install",
|
|
"install:sdk-ui": "cd \"${SDK_UI_DIR:-../pezkuwi-sdk-ui}\" 2>/dev/null && yarn install || echo 'sdk-ui: skipped (set SDK_UI_DIR to the pezkuwi-sdk-ui checkout to enable)'",
|
|
"install:mobile": "cd mobile && npm install",
|
|
"install:backend": "cd backend && npm install",
|
|
"lint": "npm run lint:web && npm run lint:mobile",
|
|
"lint:web": "cd web && npm run lint",
|
|
"lint:mobile": "cd mobile && npm run lint",
|
|
"test": "npm run test:web && npm run test:mobile",
|
|
"test:web": "cd web && npm run test",
|
|
"test:mobile": "cd mobile && npm run test"
|
|
},
|
|
"devDependencies": {
|
|
"concurrently": "^9.1.2"
|
|
}
|
|
}
|