5e7a566155
browserslist <= 4.28.6 carries two HIGH advisories published 2026-09-01: GHSA-c83g-rgw3-j3cx (unbounded memory growth, no cache eviction, leading to OOM) and GHSA-73wf-gq98-2v4g (uncaught crash / prototype write via an untrusted browserslist-stats.json in normalizeStats). Both report first_patched_version = 4.28.7. Unlike the image-size root fixed in #114, this one has a published fix, so a plain version floor is enough. Every requester already uses a caret range compatible with 4.28.7 (@babel/helper-compilation-targets ^4.24.0, @expo/metro-config ^4.25.0, core-js-compat ^4.28.1, update-browserslist-db peer >= 4.21.0) -- the lock was simply pinned at 4.28.1. The override records the security floor the same way as the existing esbuild, @xmldom/xmldom, postcss, brace-expansion and @babel/core entries. Resolves to 4.28.9. npm audit: 11 -> 10 total, 1 HIGH -> 0 HIGH. No high or critical finding remains in the tree. Verified: the lock stays unchanged under re-resolution against package.json, npm ci accepts the pair (what EAS runs), npm test 11/11, and expo export --platform android emits a byte-identical Hermes bundle (index-3d9ab1a7942c6dfccc79d9b280b8ce80.hbc, 8.17 MB) -- the compilation targets browserslist resolves are unchanged. Refs #115 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016Y4GzEsmDryrwtQcmBNw9P
115 lines
3.4 KiB
JSON
115 lines
3.4 KiB
JSON
{
|
|
"name": "simpl-liste",
|
|
"main": "index.js",
|
|
"version": "1.6.6",
|
|
"scripts": {
|
|
"start": "expo start",
|
|
"test": "node tests/smoke.test.cjs && node --test --disable-warning=ExperimentalWarning --disable-warning=MODULE_TYPELESS_PACKAGE_JSON tests/feedback.test.mjs",
|
|
"android": "expo start --android",
|
|
"ios": "expo start --ios",
|
|
"web": "expo start --web",
|
|
"postinstall": "patch-package"
|
|
},
|
|
"dependencies": {
|
|
"@expo-google-fonts/inter": "^0.4.2",
|
|
"@expo/ngrok": "^4.1.3",
|
|
"@expo/vector-icons": "^15.0.3",
|
|
"@logto/rn": "^1.1.0",
|
|
"@react-native-async-storage/async-storage": "2.2.0",
|
|
"@react-native-community/datetimepicker": "8.4.4",
|
|
"@react-navigation/native": "^7.1.8",
|
|
"date-fns": "^4.1.0",
|
|
"drizzle-orm": "^0.45.2",
|
|
"expo": "~54.0.34",
|
|
"expo-auth-session": "~7.0.11",
|
|
"expo-calendar": "~15.0.8",
|
|
"expo-constants": "~18.0.13",
|
|
"expo-crypto": "~15.0.9",
|
|
"expo-file-system": "~19.0.21",
|
|
"expo-font": "~14.0.11",
|
|
"expo-haptics": "~15.0.8",
|
|
"expo-intent-launcher": "~13.0.8",
|
|
"expo-linking": "~8.0.12",
|
|
"expo-localization": "~17.0.8",
|
|
"expo-notifications": "~0.32.17",
|
|
"expo-router": "~6.0.23",
|
|
"expo-secure-store": "~15.0.8",
|
|
"expo-sharing": "~14.0.8",
|
|
"expo-splash-screen": "~31.0.13",
|
|
"expo-sqlite": "~16.0.10",
|
|
"expo-status-bar": "~3.0.9",
|
|
"expo-web-browser": "~15.0.11",
|
|
"i18next": "^25.8.13",
|
|
"lucide-react-native": "^0.575.0",
|
|
"nativewind": "^4.2.2",
|
|
"react": "19.1.0",
|
|
"react-dom": "19.1.0",
|
|
"react-i18next": "^16.5.4",
|
|
"react-native": "0.81.5",
|
|
"react-native-android-widget": "^0.21.0",
|
|
"react-native-draggable-flatlist": "^4.0.3",
|
|
"react-native-gesture-handler": "~2.28.0",
|
|
"react-native-keyboard-controller": "1.18.5",
|
|
"react-native-reanimated": "~4.1.1",
|
|
"react-native-safe-area-context": "~5.6.0",
|
|
"react-native-screens": "~4.16.0",
|
|
"react-native-svg": "15.12.1",
|
|
"react-native-web": "~0.21.0",
|
|
"react-native-worklets": "0.5.1",
|
|
"zustand": "^5.0.11"
|
|
},
|
|
"devDependencies": {
|
|
"@types/react": "~19.1.0",
|
|
"drizzle-kit": "^0.31.9",
|
|
"patch-package": "^8.0.1",
|
|
"react-test-renderer": "19.1.0",
|
|
"tailwindcss": "^3.4.17",
|
|
"typescript": "~5.9.2"
|
|
},
|
|
"overrides": {
|
|
"esbuild": "^0.25.0",
|
|
"@xmldom/xmldom": "^0.8.13",
|
|
"uuid": "^11.1.1",
|
|
"postcss": "^8.5.18",
|
|
"js-yaml@^3.0.0": "^3.15.1",
|
|
"js-yaml@^4.0.0": "^4.3.1",
|
|
"brace-expansion@^1.0.0": "^1.1.18",
|
|
"brace-expansion@^2.0.0": "^2.1.4",
|
|
"brace-expansion@^5.0.0": "^5.0.9",
|
|
"@babel/core": "^7.29.6",
|
|
"browserslist": "^4.28.7",
|
|
"@expo/cli": {
|
|
"ws": "^8.20.1",
|
|
"undici": "^6.28.0",
|
|
"tar": "^7.5.21"
|
|
},
|
|
"react-devtools-core": {
|
|
"shell-quote": "^1.8.4",
|
|
"ws": "^7.5.11"
|
|
},
|
|
"react-native": {
|
|
"ws": "^7.5.11"
|
|
},
|
|
"@react-native/dev-middleware": {
|
|
"ws": "^7.5.11"
|
|
},
|
|
"metro": {
|
|
"ws": "^7.5.11",
|
|
".": "^0.83.8"
|
|
},
|
|
"metro-babel-transformer": "^0.83.8",
|
|
"metro-cache": "^0.83.8",
|
|
"metro-cache-key": "^0.83.8",
|
|
"metro-config": "^0.83.8",
|
|
"metro-core": "^0.83.8",
|
|
"metro-file-map": "^0.83.8",
|
|
"metro-minify-terser": "^0.83.8",
|
|
"metro-resolver": "^0.83.8",
|
|
"metro-runtime": "^0.83.8",
|
|
"metro-source-map": "^0.83.8",
|
|
"metro-symbolicate": "^0.83.8",
|
|
"metro-transform-plugins": "^0.83.8",
|
|
"metro-transform-worker": "^0.83.8"
|
|
},
|
|
"private": true
|
|
}
|