O scan Trivy do CI falhou no push anterior e impediu a publicacao das imagens, entao a producao seguiu na versao antiga. - webmail: next 15.5.21 -> 15.5.27 (RCE no otimizador de imagens e cache poisoning), sharp -> 0.35.5, source-map-js -> 1.2.2, dompurify -> 3.4.17 - protocols: golang.org/x/net 0.58 -> 0.60 (DoS HTTP/2) e toolchain Go 1.25 -> 1.26 (stdlib corrigida a partir de 1.26.9) Verificado localmente: imagens e repositorio sem achados HIGH/CRITICAL, testes e build verdes. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
42 lines
920 B
JSON
42 lines
920 B
JSON
{
|
|
"name": "@lambdamail/webmail",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"start": "next start -p 3000",
|
|
"test": "vitest run",
|
|
"lint": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"clsx": "^2.1.1",
|
|
"dompurify": "^3.4.14",
|
|
"framer-motion": "^11.18.2",
|
|
"lucide-react": "^0.474.0",
|
|
"next": "15.5.27",
|
|
"qrcode-generator": "^2.0.4",
|
|
"react": "^18.3.1",
|
|
"react-dom": "^18.3.1",
|
|
"tailwind-merge": "^3.0.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/dompurify": "^3.0.5",
|
|
"@types/node": "^20.14.0",
|
|
"@types/react": "^18.3.3",
|
|
"autoprefixer": "^10.4.20",
|
|
"jsdom": "^29.1.1",
|
|
"postcss": "^8.5.25",
|
|
"tailwindcss": "^3.4.17",
|
|
"typescript": "^5.5.4",
|
|
"vitest": "^3.2.7"
|
|
},
|
|
"overrides": {
|
|
"sharp": "^0.35.0",
|
|
"next": {
|
|
"postcss": "^8.5.25"
|
|
},
|
|
"nanoid": "^3.3.18"
|
|
}
|
|
}
|