mirror of
https://github.com/Luchexx/wacrm.git
synced 2026-11-02 09:19:51 +00:00
742d9e0caa
Patches 11 open Dependabot alerts on Next.js — 10 High + 1 Low: - SSRF in WebSocket upgrades (GHSA-c4j6-fc7j-m34r) - DoS in Server Components (GHSA-8h8q-6873-q5fj) - DoS in Cache Components via connection exhaustion (GHSA-mg66-mrh9-m8jx) - DoS in Image Optimization API (GHSA-h64f-5h5j-jqjh) - Middleware/Proxy bypass via segment-prefetch routes (GHSA-267c-6grr-h53f, GHSA-26hh-7cqf-hhc6 follow-up) - Middleware/Proxy bypass via i18n in Pages Router (GHSA-36qx-fr4f-26g5) - Middleware/Proxy bypass via dynamic route param injection (GHSA-492v-c6pp-mqqv) - XSS in beforeInteractive scripts (GHSA-gx5p-jg67-6x7h) - XSS in CSP-nonce App Router apps (GHSA-ffhc-5mcf-pf4q) - Cache poisoning in RSC responses (GHSA-wfc6-r584-vfw7) - Cache-busting collision in RSC (GHSA-vfv6-92ff-j949, Low) - Cache-poisoned Middleware redirects (GHSA-3g8h-86w9-wvmq, Low) Also bumps eslint-config-next to 16.2.6 to keep major/minor lockstep with next, per Vercel's docs. Verified locally: npm run lint — 0 errors (23 pre-existing warnings) npm run typecheck — clean npm test — 89 passed, 7 files npm run build — succeeded The remaining 11 alerts (postcss/ip-address/fast-uri/hono) are transitive and ship via the shadcn CLI's tree; they'll be patched separately via npm overrides. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
74 lines
1.8 KiB
JSON
74 lines
1.8 KiB
JSON
{
|
|
"name": "wacrm",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"description": "Self-hostable CRM template for WhatsApp built on Next.js and Supabase — shared inbox, contacts, sales pipelines, broadcasts, and no-code automations.",
|
|
"license": "MIT",
|
|
"author": "Arnas Donauskas",
|
|
"homepage": "https://github.com/ArnasDon/wacrm",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/ArnasDon/wacrm.git"
|
|
},
|
|
"bugs": {
|
|
"url": "https://github.com/ArnasDon/wacrm/issues"
|
|
},
|
|
"keywords": [
|
|
"crm",
|
|
"whatsapp",
|
|
"whatsapp-business-api",
|
|
"nextjs",
|
|
"supabase",
|
|
"automation",
|
|
"broadcast",
|
|
"self-hosted",
|
|
"template"
|
|
],
|
|
"engines": {
|
|
"node": ">=20.0.0"
|
|
},
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "eslint",
|
|
"typecheck": "tsc --noEmit",
|
|
"format": "prettier --write .",
|
|
"format:check": "prettier --check .",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest"
|
|
},
|
|
"dependencies": {
|
|
"@base-ui/react": "^1.4.1",
|
|
"@dnd-kit/core": "^6.3.1",
|
|
"@dnd-kit/sortable": "^10.0.0",
|
|
"@dnd-kit/utilities": "^3.2.2",
|
|
"@supabase/ssr": "^0.10.3",
|
|
"@supabase/supabase-js": "^2.103.3",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"date-fns": "^4.1.0",
|
|
"lucide-react": "^1.8.0",
|
|
"next": "16.2.6",
|
|
"react": "19.2.4",
|
|
"react-dom": "19.2.4",
|
|
"shadcn": "^4.2.0",
|
|
"sonner": "^2.0.7",
|
|
"tailwind-merge": "^3.5.0",
|
|
"tw-animate-css": "^1.4.0"
|
|
},
|
|
"devDependencies": {
|
|
"@tailwindcss/postcss": "^4",
|
|
"@types/node": "^25",
|
|
"@types/react": "^19",
|
|
"@types/react-dom": "^19",
|
|
"eslint": "^9",
|
|
"eslint-config-next": "16.2.6",
|
|
"prettier": "^3.8.3",
|
|
"prettier-plugin-tailwindcss": "^0.7.2",
|
|
"tailwindcss": "^4",
|
|
"typescript": "^6",
|
|
"vitest": "^4.1.6"
|
|
}
|
|
}
|