mirror of
https://github.com/pezkuwichain/pwap.git
synced 2026-07-26 20:05:40 +00:00
pezkuwichain
27b4057bd4
Audit remediation (build/supply-chain/quality):
- Add `@pezkuwi/api-augment` import in main.tsx -> tsc errors 416->328 (Codec-typed
on-chain reads now augmented); add `typecheck` script + a non-blocking Typecheck CI
step (flip to blocking once errors reach 0).
- CI: `npm install` -> `npm ci` (lockfile enforced) in web + security-audit jobs; add a
Backend Indexer job (npm ci + node --check + non-blocking high/critical audit). No
live tests run in CI (they need a live chain) — a mockable CI test subset is a
follow-up.
- Vulns: bump dompurify ^3.4.12 + postcss ^8.5.23 (web prod highs cleared; only the
react-router v7 open-redirect remains, deferred as a breaking major); backend tar
^7.5.22 + ws ^8.21.1 (clears the critical tar advisory). Lockfiles regenerated.
- Prod build now drops console/debugger (vite esbuild.drop); NotificationBell realtime
subscription now returns cleanup + uses a per-user channel (fixes leak); ProfileSettings
language codes aligned to i18n config (ku-kurmanji/ku-sorani).
- Root package.json sdk-ui path env-driven (${SDK_UI_DIR}); generate-docs rustup path
resolved dynamically; Docker image license label MIT (matches LICENSE). Removed scratch
files (mimari.txt, _scratch_credit_serok.mjs).
45 lines
1.3 KiB
JSON
45 lines
1.3 KiB
JSON
{
|
|
"name": "pezkuwi-indexer-service",
|
|
"version": "1.0.0",
|
|
"description": "Simple Transaction Indexer for Pezkuwi Chain",
|
|
"main": "src/index.js",
|
|
"type": "module",
|
|
"scripts": {
|
|
"start": "node src/index.js",
|
|
"dev": "node --watch src/index.js"
|
|
},
|
|
"overrides": {
|
|
"tar": "^7.5.22",
|
|
"ws": "^8.21.1",
|
|
"@pezkuwi/api": "^16.5.23",
|
|
"@pezkuwi/api-augment": "^16.5.23",
|
|
"@pezkuwi/api-base": "^16.5.23",
|
|
"@pezkuwi/api-derive": "^16.5.23",
|
|
"@pezkuwi/rpc-augment": "^16.5.23",
|
|
"@pezkuwi/rpc-core": "^16.5.23",
|
|
"@pezkuwi/rpc-provider": "^16.5.23",
|
|
"@pezkuwi/types": "^16.5.23",
|
|
"@pezkuwi/types-augment": "^16.5.23",
|
|
"@pezkuwi/types-codec": "^16.5.23",
|
|
"@pezkuwi/types-create": "^16.5.23",
|
|
"@pezkuwi/types-known": "^16.5.23",
|
|
"@pezkuwi/types-support": "^16.5.23",
|
|
"@pezkuwi/keyring": "^14.0.13",
|
|
"@pezkuwi/util": "^14.0.13",
|
|
"@pezkuwi/util-crypto": "^14.0.13",
|
|
"@pezkuwi/networks": "^14.0.13",
|
|
"@pezkuwi/x-bigint": "^14.0.13",
|
|
"@pezkuwi/x-randomvalues": "^14.0.13"
|
|
},
|
|
"dependencies": {
|
|
"@pezkuwi/api": "^16.5.23",
|
|
"@pezkuwi/util": "^14.0.13",
|
|
"@pezkuwi/util-crypto": "^14.0.13",
|
|
"cors": "^2.8.5",
|
|
"dotenv": "^17.2.3",
|
|
"express": "^5.2.1",
|
|
"sqlite": "^5.1.1",
|
|
"sqlite3": "^5.1.7"
|
|
}
|
|
}
|