mirror of
https://github.com/IliesAllali/parenthese.git
synced 2026-11-10 07:52:13 +00:00
Les versions de sharp antérieures à 0.35.0 sont touchées quand elles décodent des images non fiables (GHSA-f88m-g3jw-g9cj, libvips), et antérieures à 0.35.4 pour libheif (GHSA-rgj7-g3m4-5g8c). Parenthèse décode les photos envoyées par la famille : montée en 0.35.5 (libvips 8.18.7). Aucun changement d'API utilisé ici (Node 24, failOn, rotate, sorties JPEG/PNG/WebP). 112 tests, recette sécurité et comparaison de rotation relues. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
38 lines
1021 B
JSON
38 lines
1021 B
JSON
{
|
|
"name": "backend",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"db:bootstrap": "node scripts/db-local.mjs bootstrap",
|
|
"db:start": "node scripts/db-local.mjs start",
|
|
"db:stop": "node scripts/db-local.mjs stop",
|
|
"db:status": "node scripts/db-local.mjs status",
|
|
"dev": "tsx watch src/server.ts",
|
|
"build": "tsc -p tsconfig.json",
|
|
"start": "node dist/server.js",
|
|
"test": "vitest run",
|
|
"prisma:generate": "prisma generate",
|
|
"prisma:migrate": "prisma migrate dev",
|
|
"prisma:deploy": "prisma migrate deploy"
|
|
},
|
|
"dependencies": {
|
|
"@fastify/cors": "^10.1.0",
|
|
"@fastify/jwt": "^10.2.2",
|
|
"@fastify/rate-limit": "^10.3.0",
|
|
"@prisma/client": "^6.15.0",
|
|
"bcryptjs": "^3.0.2",
|
|
"dotenv": "^16.6.1",
|
|
"fastify": "^5.6.1",
|
|
"sharp": "^0.35.5",
|
|
"zod": "^4.1.5"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^24.3.0",
|
|
"prisma": "^6.15.0",
|
|
"tsx": "^4.23.15",
|
|
"typescript": "^5.9.2",
|
|
"vitest": "^5.0.1"
|
|
}
|
|
}
|