feat: v0.3.8–v0.3.14 工作区汇总（依赖升级、整理来源、手动入库、原地入库等）
生产 v0.3.8～v0.3.13 均由 8013196 加工作区修改构建部署，此前未提交；本提交补齐源码，
并含未部署的 v0.3.14 原地入库。中间各版本源码状态未保存，无法逐版拆分，详见
docs/plan/17-full-upgrade.md 与 docs/plan/18-organize-release.md。
- v0.3.8 全面升级：Deno workspace 依赖、Router 8 / Vite 8、camofox 1.18.0 / Node 24、
PostgreSQL 18.6、备份客户端 18.6、演示 qB 5.2.4
- v0.3.9 媒体整理：分类规则、整理来源与目录快照（0059）、文件管理整理入口
- v0.3.10 手动下载与入库：独立手动下载、详情页资源下载、TMDB / Local 元数据兜底
（metadata.resolve_organize）、正常多版本 / 一次性洗版（0060）
- v0.3.11 搜索详情与桌面黑边修复
- v0.3.12 列表分页、搜索历史、首页概况
- v0.3.13 统一整理弹窗与队列
- v0.3.14 原地入库（0061，未部署）
同批审计修复：
- 刮削入队：确认原记录存在后才删重放产生的新记录；写回 run 关联失败时保持 queued，
由处理器补关联（对齐 MP 先登记、只在入队失败时记失败）
- 识别升级链只在结果更确定时采用，不再用 no_match 顶替原有歧义候选
- bluray_dir 资产以原盘目录本身为刮削根（MP 同做法）
- metadata.resolve_organize 登记到入库排障 Skill 与能力地图
- db/src/types.ts 按迁移重新生成；contracts 整理动作枚举顺序与数据库对齐
- 测试：原地入库用例改为直接查记录表；domain 测试模板补 version
- 前端：通知铃铛弹层与用户菜单统一样式；站点卡片共用卡头、底栏贴底、分页间距
依赖升级证据只提交摘要文件，registry-snapshot.json 移至 .local/（SHA-256 记于文档）。
Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
rootandClaude Opus 5.5 committed
1 parent
8013196e3f
commit
ceb66f8c77
265 files changed
+17751
-2483
No files matched your search
@@ -0,0 +1,466 @@
|
||||
{
|
||||
"jsr_path": {
|
||||
"scope": "std",
|
||||
"name": "path",
|
||||
"latest": "1.1.6",
|
||||
"versions": {
|
||||
"0.204.0": {
|
||||
"createdAt": "2024-04-24T06:22:04.054652Z"
|
||||
},
|
||||
"0.219.0": {
|
||||
"createdAt": "2024-03-08T07:11:36.056284Z"
|
||||
},
|
||||
"1.1.6": {
|
||||
"createdAt": "2026-06-30T10:24:29.944663Z"
|
||||
},
|
||||
"0.213.0": {
|
||||
"createdAt": "2024-01-26T08:16:46.618940Z"
|
||||
},
|
||||
"1.0.0-rc.3": {
|
||||
"createdAt": "2024-07-02T11:46:57.873141Z"
|
||||
},
|
||||
"0.218.1": {
|
||||
"createdAt": "2024-03-01T03:44:36.998490Z"
|
||||
},
|
||||
"0.212.0": {
|
||||
"createdAt": "2024-01-16T10:22:10.013057Z"
|
||||
},
|
||||
"1.1.5": {
|
||||
"createdAt": "2026-05-26T09:57:13.079190Z"
|
||||
},
|
||||
"0.205.0": {
|
||||
"createdAt": "2024-04-24T06:20:40.855663Z"
|
||||
},
|
||||
"0.198.0": {
|
||||
"createdAt": "2024-04-24T06:54:01.469929Z"
|
||||
},
|
||||
"1.0.3": {
|
||||
"createdAt": "2024-08-26T08:37:13.530991Z"
|
||||
},
|
||||
"1.0.0-rc.4": {
|
||||
"createdAt": "2024-07-09T06:17:02.990512Z"
|
||||
},
|
||||
"0.211.0": {
|
||||
"createdAt": "2024-04-23T14:29:25.560075Z"
|
||||
},
|
||||
"1.1.3": {
|
||||
"createdAt": "2025-11-17T08:24:43.343051Z"
|
||||
},
|
||||
"0.223.0": {
|
||||
"createdAt": "2024-04-16T11:36:08.884192Z"
|
||||
},
|
||||
"1.1.4": {
|
||||
"createdAt": "2025-12-24T07:18:31.658575Z"
|
||||
},
|
||||
"0.216.0": {
|
||||
"createdAt": "2024-02-16T06:12:39.561859Z"
|
||||
},
|
||||
"0.214.0": {
|
||||
"createdAt": "2024-02-06T09:55:45.141761Z"
|
||||
},
|
||||
"0.225.2": {
|
||||
"createdAt": "2024-06-03T06:47:44.310028Z"
|
||||
},
|
||||
"0.218.0": {
|
||||
"createdAt": "2024-02-29T23:28:16.999233Z"
|
||||
},
|
||||
"0.196.0": {
|
||||
"createdAt": "2024-04-25T05:40:21.193428Z"
|
||||
},
|
||||
"0.203.0": {
|
||||
"createdAt": "2024-04-24T06:33:50.897004Z"
|
||||
},
|
||||
"0.197.0": {
|
||||
"createdAt": "2024-04-25T05:37:18.401737Z"
|
||||
},
|
||||
"0.215.0": {
|
||||
"createdAt": "2024-02-08T21:57:13.585426Z"
|
||||
},
|
||||
"0.213.1": {
|
||||
"createdAt": "2024-01-26T19:07:59.609934Z"
|
||||
},
|
||||
"1.0.7": {
|
||||
"createdAt": "2024-10-24T10:27:26.548716Z"
|
||||
},
|
||||
"1.0.8": {
|
||||
"createdAt": "2024-11-01T10:38:03.318975Z"
|
||||
},
|
||||
"1.0.6": {
|
||||
"createdAt": "2024-09-12T17:00:19.414985Z"
|
||||
},
|
||||
"1.0.0": {
|
||||
"createdAt": "2024-07-12T10:50:37.927014Z"
|
||||
},
|
||||
"0.225.1": {
|
||||
"createdAt": "2024-05-16T11:15:16.445309Z"
|
||||
},
|
||||
"0.217.0": {
|
||||
"createdAt": "2024-02-22T05:47:42.790539Z"
|
||||
},
|
||||
"0.207.0": {
|
||||
"createdAt": "2024-04-24T06:15:28.582574Z"
|
||||
},
|
||||
"1.0.5": {
|
||||
"createdAt": "2024-09-12T10:26:27.814650Z"
|
||||
},
|
||||
"1.0.2": {
|
||||
"createdAt": "2024-07-26T10:49:53.428735Z"
|
||||
},
|
||||
"1.0.1": {
|
||||
"createdAt": "2024-07-19T11:25:58.680433Z"
|
||||
},
|
||||
"0.200.0": {
|
||||
"createdAt": "2024-04-24T06:44:40.616320Z"
|
||||
},
|
||||
"1.0.9": {
|
||||
"createdAt": "2025-04-24T06:23:27.551197Z"
|
||||
},
|
||||
"0.224.0": {
|
||||
"createdAt": "2024-04-25T07:39:27.314783Z"
|
||||
},
|
||||
"0.221.0": {
|
||||
"createdAt": "2024-03-28T00:04:19.321412Z"
|
||||
},
|
||||
"1.1.2": {
|
||||
"createdAt": "2025-08-13T12:38:19.728538Z"
|
||||
},
|
||||
"0.210.0": {
|
||||
"createdAt": "2023-12-22T11:26:40.901028Z"
|
||||
},
|
||||
"0.220.1": {
|
||||
"createdAt": "2024-03-15T02:40:27.584710Z"
|
||||
},
|
||||
"0.206.0": {
|
||||
"createdAt": "2024-04-24T06:19:17.889544Z"
|
||||
},
|
||||
"1.1.1": {
|
||||
"createdAt": "2025-07-01T07:43:30.791791Z"
|
||||
},
|
||||
"0.222.1": {
|
||||
"createdAt": "2024-04-11T11:12:26.247290Z"
|
||||
},
|
||||
"1.0.0-rc.2": {
|
||||
"createdAt": "2024-06-17T09:56:55.865334Z"
|
||||
},
|
||||
"0.219.1": {
|
||||
"createdAt": "2024-03-08T09:39:27.810189Z"
|
||||
},
|
||||
"0.218.2": {
|
||||
"createdAt": "2024-03-01T04:33:16.720737Z"
|
||||
},
|
||||
"1.0.0-rc.1": {
|
||||
"createdAt": "2024-06-06T11:30:54.416826Z"
|
||||
},
|
||||
"1.0.4": {
|
||||
"createdAt": "2024-09-04T10:41:45.785792Z"
|
||||
},
|
||||
"1.1.0": {
|
||||
"createdAt": "2025-05-27T07:30:38.330934Z"
|
||||
},
|
||||
"0.225.0": {
|
||||
"yanked": true,
|
||||
"createdAt": "2024-04-29T16:05:05.405226Z"
|
||||
},
|
||||
"0.208.0": {
|
||||
"createdAt": "2024-04-24T06:08:36.973193Z"
|
||||
},
|
||||
"0.199.0": {
|
||||
"createdAt": "2024-04-24T06:50:53.628212Z"
|
||||
},
|
||||
"0.201.0": {
|
||||
"createdAt": "2024-04-24T06:39:27.098273Z"
|
||||
},
|
||||
"0.222.0": {
|
||||
"createdAt": "2024-04-11T05:45:10.832896Z"
|
||||
},
|
||||
"0.209.0": {
|
||||
"createdAt": "2024-04-23T15:22:26.240920Z"
|
||||
},
|
||||
"0.202.0": {
|
||||
"createdAt": "2024-04-24T06:37:25.846681Z"
|
||||
}
|
||||
}
|
||||
},
|
||||
"jsr_internal": {
|
||||
"scope": "std",
|
||||
"name": "internal",
|
||||
"latest": "1.0.14",
|
||||
"versions": {
|
||||
"0.197.0": {
|
||||
"createdAt": "2024-04-25T05:37:04.008388Z"
|
||||
},
|
||||
"0.202.0": {
|
||||
"createdAt": "2024-04-24T06:37:17.278025Z"
|
||||
},
|
||||
"1.0.9": {
|
||||
"createdAt": "2025-07-01T07:43:25.269328Z"
|
||||
},
|
||||
"1.0.10": {
|
||||
"createdAt": "2025-07-22T13:14:56.088744Z"
|
||||
},
|
||||
"0.216.0": {
|
||||
"createdAt": "2024-02-16T06:12:14.762854Z"
|
||||
},
|
||||
"1.0.0": {
|
||||
"createdAt": "2024-05-22T11:08:19.499017Z"
|
||||
},
|
||||
"0.215.0": {
|
||||
"createdAt": "2024-02-08T21:56:50.207994Z"
|
||||
},
|
||||
"0.205.0": {
|
||||
"createdAt": "2024-04-24T06:20:31.113119Z"
|
||||
},
|
||||
"0.225.1": {
|
||||
"createdAt": "2024-05-16T11:15:06.195844Z"
|
||||
},
|
||||
"0.225.0": {
|
||||
"yanked": true,
|
||||
"createdAt": "2024-04-29T16:04:59.888254Z"
|
||||
},
|
||||
"0.214.0": {
|
||||
"createdAt": "2024-02-06T05:50:11.102748Z"
|
||||
},
|
||||
"0.213.1": {
|
||||
"createdAt": "2024-01-26T19:07:53.131686Z"
|
||||
},
|
||||
"0.201.0": {
|
||||
"createdAt": "2024-04-24T06:39:20.704773Z"
|
||||
},
|
||||
"0.196.0": {
|
||||
"createdAt": "2024-04-25T05:40:15.000809Z"
|
||||
},
|
||||
"1.0.5": {
|
||||
"createdAt": "2024-11-01T10:38:01.932266Z"
|
||||
},
|
||||
"0.207.0": {
|
||||
"createdAt": "2024-04-24T06:15:05.941336Z"
|
||||
},
|
||||
"1.0.6": {
|
||||
"createdAt": "2025-03-25T07:17:06.921973Z"
|
||||
},
|
||||
"0.199.0": {
|
||||
"createdAt": "2024-04-24T06:50:41.464255Z"
|
||||
},
|
||||
"1.0.13": {
|
||||
"createdAt": "2026-04-20T13:57:46.913983Z"
|
||||
},
|
||||
"0.206.0": {
|
||||
"createdAt": "2024-04-24T06:19:08.538414Z"
|
||||
},
|
||||
"0.208.0": {
|
||||
"createdAt": "2024-04-24T06:08:11.707171Z"
|
||||
},
|
||||
"1.0.8": {
|
||||
"createdAt": "2025-05-27T07:30:44.423577Z"
|
||||
},
|
||||
"0.204.0": {
|
||||
"createdAt": "2024-04-24T06:21:55.527004Z"
|
||||
},
|
||||
"0.213.0": {
|
||||
"createdAt": "2024-01-26T08:09:52.150304Z"
|
||||
},
|
||||
"0.198.0": {
|
||||
"createdAt": "2024-04-24T06:53:55.032868Z"
|
||||
},
|
||||
"1.0.3": {
|
||||
"createdAt": "2024-09-04T10:41:43.017156Z"
|
||||
},
|
||||
"1.0.14": {
|
||||
"createdAt": "2026-05-26T09:57:07.159939Z"
|
||||
},
|
||||
"0.203.0": {
|
||||
"createdAt": "2024-04-24T06:33:28.861052Z"
|
||||
},
|
||||
"1.0.7": {
|
||||
"createdAt": "2025-05-13T07:25:42.233848Z"
|
||||
},
|
||||
"1.0.2": {
|
||||
"createdAt": "2024-08-26T08:37:19.813343Z"
|
||||
},
|
||||
"0.200.0": {
|
||||
"createdAt": "2024-04-24T06:44:21.451197Z"
|
||||
},
|
||||
"1.0.12": {
|
||||
"createdAt": "2025-10-07T08:24:12.939816Z"
|
||||
},
|
||||
"1.0.4": {
|
||||
"createdAt": "2024-09-24T10:31:08.642379Z"
|
||||
},
|
||||
"0.224.0": {
|
||||
"createdAt": "2024-04-25T07:39:12.537935Z"
|
||||
},
|
||||
"1.0.1": {
|
||||
"createdAt": "2024-07-02T11:47:12.495023Z"
|
||||
}
|
||||
}
|
||||
},
|
||||
"pi_release": {
|
||||
"tag_name": "v0.99.2",
|
||||
"published_at": "2026-09-30T19:30:47Z",
|
||||
"html_url": "https://github.com/earendil-works/pi/releases/tag/v0.99.2"
|
||||
},
|
||||
"camofox_118_manifest": {
|
||||
"name": "@askjo/camofox-browser",
|
||||
"version": "1.18.0",
|
||||
"engines": {
|
||||
"node": ">=22"
|
||||
},
|
||||
"dependencies": {
|
||||
"better-sqlite3": "13.0.1",
|
||||
"camoufox-js": "0.11.5",
|
||||
"express": "^5.2.1",
|
||||
"playwright-core": "^1.58.0",
|
||||
"prom-client": "^15.1.3",
|
||||
"swagger-jsdoc": "^6.2.8"
|
||||
},
|
||||
"optionalDependencies": {
|
||||
"@modelcontextprotocol/sdk": "^1.30.0"
|
||||
},
|
||||
"overrides": {
|
||||
"@jest/reporters": {
|
||||
"glob": "13.0.6"
|
||||
},
|
||||
"babel-plugin-istanbul": {
|
||||
"test-exclude": "8.0.0"
|
||||
},
|
||||
"jest-config": {
|
||||
"glob": "13.0.6"
|
||||
},
|
||||
"jest-runtime": {
|
||||
"glob": "13.0.6"
|
||||
},
|
||||
"swagger-jsdoc": {
|
||||
"glob": "13.0.6"
|
||||
},
|
||||
"qs": "6.16.0",
|
||||
"fast-uri": "3.1.8",
|
||||
"hono": "4.13.5"
|
||||
}
|
||||
},
|
||||
"static_ffmpeg_release": {
|
||||
"error": "HTTP Error 404: Not Found"
|
||||
},
|
||||
"pixelflux": {
|
||||
"version": "2.1.0",
|
||||
"requires_python": ">=3.9",
|
||||
"project_urls": {
|
||||
"Homepage": "https://github.com/selkies-project/pixelflux"
|
||||
}
|
||||
},
|
||||
"selkies": {
|
||||
"version": "2.0.0",
|
||||
"requires_python": ">=3.9",
|
||||
"project_urls": {
|
||||
"Bug Tracker": "https://github.com/selkies-project/selkies/issues",
|
||||
"Homepage": "https://github.com/selkies-project/selkies"
|
||||
}
|
||||
},
|
||||
"labwc_release": {
|
||||
"tag_name": "0.20.2",
|
||||
"published_at": "2026-08-21T17:28:56Z",
|
||||
"html_url": "https://github.com/labwc/labwc/releases/tag/0.20.2"
|
||||
},
|
||||
"rr7": {
|
||||
"name": "react-router",
|
||||
"version": "7.18.4",
|
||||
"engines": {
|
||||
"node": ">=20.0.0"
|
||||
},
|
||||
"peerDependencies": {
|
||||
"react": ">=18",
|
||||
"react-dom": ">=18"
|
||||
}
|
||||
},
|
||||
"rrdev7": {
|
||||
"name": "@react-router/dev",
|
||||
"version": "7.18.4",
|
||||
"engines": {
|
||||
"node": ">=20.0.0"
|
||||
},
|
||||
"peerDependencies": {
|
||||
"vite": "^5.1.0 || ^6.0.0 || ^7.0.0 || ^8.0.0",
|
||||
"wrangler": "^3.28.2 || ^4.0.0",
|
||||
"typescript": "^5.1.0 || ^6.0.0",
|
||||
"react-router": "^7.18.4",
|
||||
"@vitejs/plugin-rsc": "~0.5.21",
|
||||
"@react-router/serve": "^7.18.4",
|
||||
"react-server-dom-webpack": "^19.2.3"
|
||||
}
|
||||
},
|
||||
"rrnode7": {
|
||||
"name": "@react-router/node",
|
||||
"version": "7.18.4",
|
||||
"engines": {
|
||||
"node": ">=20.0.0"
|
||||
},
|
||||
"peerDependencies": {
|
||||
"typescript": "^5.1.0 || ^6.0.0",
|
||||
"react-router": "7.18.4"
|
||||
}
|
||||
},
|
||||
"browser:better-sqlite3": {
|
||||
"name": "better-sqlite3",
|
||||
"version": "13.0.3",
|
||||
"engines": {
|
||||
"node": ">=22"
|
||||
}
|
||||
},
|
||||
"browser:camoufox-js": {
|
||||
"name": "camoufox-js",
|
||||
"version": "0.12.0",
|
||||
"engines": {
|
||||
"node": ">= 22"
|
||||
},
|
||||
"peerDependencies": {
|
||||
"playwright-core": "<1.61.0"
|
||||
}
|
||||
},
|
||||
"browser:express": {
|
||||
"name": "express",
|
||||
"version": "5.2.1",
|
||||
"engines": {
|
||||
"node": ">= 18"
|
||||
}
|
||||
},
|
||||
"browser:playwright-core": {
|
||||
"name": "playwright-core",
|
||||
"version": "1.63.0",
|
||||
"engines": {
|
||||
"node": ">=20"
|
||||
}
|
||||
},
|
||||
"browser:prom-client": {
|
||||
"name": "prom-client",
|
||||
"version": "15.1.3",
|
||||
"engines": {
|
||||
"node": "^16 || ^18 || >=20"
|
||||
}
|
||||
},
|
||||
"browser:swagger-jsdoc": {
|
||||
"name": "swagger-jsdoc",
|
||||
"version": "6.3.0",
|
||||
"engines": {
|
||||
"node": ">=20.0.0"
|
||||
}
|
||||
},
|
||||
"pi_mcp": {
|
||||
"name": "@earendil-works/pi-mcp",
|
||||
"version": "0.99.2",
|
||||
"engines": {
|
||||
"node": ">=22.19.0"
|
||||
},
|
||||
"dependencies": {
|
||||
"cross-spawn": "7.0.6"
|
||||
}
|
||||
},
|
||||
"pi_codemode": {
|
||||
"name": "@earendil-works/pi-codemode",
|
||||
"version": "0.99.2",
|
||||
"engines": {
|
||||
"node": ">=22.19.0"
|
||||
},
|
||||
"dependencies": {
|
||||
"quickjs-wasi": "3.6.2"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,353 @@
|
||||
{
|
||||
"auditReportVersion": 2,
|
||||
"vulnerabilities": {
|
||||
"adm-zip": {
|
||||
"name": "adm-zip",
|
||||
"severity": "high",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1193734,
|
||||
"name": "adm-zip",
|
||||
"dependency": "adm-zip",
|
||||
"title": "adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite",
|
||||
"url": "https://github.com/advisories/GHSA-vwc7-r8mq-g2x9",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-59"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 6.5,
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N"
|
||||
},
|
||||
"range": ">=0.5.9 <=0.6.0"
|
||||
},
|
||||
{
|
||||
"source": 1239030,
|
||||
"name": "adm-zip",
|
||||
"dependency": "adm-zip",
|
||||
"title": "adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)",
|
||||
"url": "https://github.com/advisories/GHSA-7q85-xj36-vmfc",
|
||||
"severity": "high",
|
||||
"cwe": [
|
||||
"CWE-789"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 7.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
|
||||
},
|
||||
"range": "<0.6.1"
|
||||
},
|
||||
{
|
||||
"source": 1240032,
|
||||
"name": "adm-zip",
|
||||
"dependency": "adm-zip",
|
||||
"title": "adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0",
|
||||
"url": "https://github.com/advisories/GHSA-rcw4-f5rp-g42v",
|
||||
"severity": "high",
|
||||
"cwe": [
|
||||
"CWE-409"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 7.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
|
||||
},
|
||||
"range": "<=0.6.0"
|
||||
},
|
||||
{
|
||||
"source": 1240034,
|
||||
"name": "adm-zip",
|
||||
"dependency": "adm-zip",
|
||||
"title": "adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation",
|
||||
"url": "https://github.com/advisories/GHSA-j5f4-cc29-5x44",
|
||||
"severity": "high",
|
||||
"cwe": [
|
||||
"CWE-732"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 7.1,
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
|
||||
},
|
||||
"range": "<=0.6.0"
|
||||
},
|
||||
{
|
||||
"source": 1240064,
|
||||
"name": "adm-zip",
|
||||
"dependency": "adm-zip",
|
||||
"title": "adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content",
|
||||
"url": "https://github.com/advisories/GHSA-p634-w6r4-rjp2",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-436",
|
||||
"CWE-696"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 5.9,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
|
||||
},
|
||||
"range": "<=0.6.0"
|
||||
},
|
||||
{
|
||||
"source": 1240065,
|
||||
"name": "adm-zip",
|
||||
"dependency": "adm-zip",
|
||||
"title": "adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path",
|
||||
"url": "https://github.com/advisories/GHSA-c6fg-446q-cg94",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-400",
|
||||
"CWE-770"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 5.3,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
|
||||
},
|
||||
"range": "<=0.6.0"
|
||||
},
|
||||
{
|
||||
"source": 1240066,
|
||||
"name": "adm-zip",
|
||||
"dependency": "adm-zip",
|
||||
"title": "adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)",
|
||||
"url": "https://github.com/advisories/GHSA-8238-w5pm-2374",
|
||||
"severity": "high",
|
||||
"cwe": [
|
||||
"CWE-248",
|
||||
"CWE-400"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 7.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
|
||||
},
|
||||
"range": "<=0.6.0"
|
||||
}
|
||||
],
|
||||
"effects": [],
|
||||
"range": "<=0.6.0",
|
||||
"nodes": [
|
||||
"node_modules/adm-zip"
|
||||
],
|
||||
"fixAvailable": true
|
||||
},
|
||||
"brace-expansion": {
|
||||
"name": "brace-expansion",
|
||||
"severity": "high",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1240103,
|
||||
"name": "brace-expansion",
|
||||
"dependency": "brace-expansion",
|
||||
"title": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service",
|
||||
"url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-400",
|
||||
"CWE-407"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 5.3,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
|
||||
},
|
||||
"range": ">=4.0.0 <5.0.12"
|
||||
},
|
||||
{
|
||||
"source": 1240107,
|
||||
"name": "brace-expansion",
|
||||
"dependency": "brace-expansion",
|
||||
"title": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion",
|
||||
"url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7",
|
||||
"severity": "high",
|
||||
"cwe": [
|
||||
"CWE-400",
|
||||
"CWE-674"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 7.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
|
||||
},
|
||||
"range": ">=4.0.0 <5.0.11"
|
||||
},
|
||||
{
|
||||
"source": 1240111,
|
||||
"name": "brace-expansion",
|
||||
"dependency": "brace-expansion",
|
||||
"title": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion",
|
||||
"url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p",
|
||||
"severity": "high",
|
||||
"cwe": [
|
||||
"CWE-400",
|
||||
"CWE-674"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 7.5,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
|
||||
},
|
||||
"range": ">=4.0.0 <5.0.10"
|
||||
}
|
||||
],
|
||||
"effects": [],
|
||||
"range": "4.0.0 - 5.0.11",
|
||||
"nodes": [
|
||||
"node_modules/brace-expansion"
|
||||
],
|
||||
"fixAvailable": true
|
||||
},
|
||||
"fast-uri": {
|
||||
"name": "fast-uri",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1240091,
|
||||
"name": "fast-uri",
|
||||
"dependency": "fast-uri",
|
||||
"title": "fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets",
|
||||
"url": "https://github.com/advisories/GHSA-hrr3-gc8f-f4qj",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-178"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 4.8,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
|
||||
},
|
||||
"range": ">=3.0.0 <3.1.8"
|
||||
}
|
||||
],
|
||||
"effects": [],
|
||||
"range": "3.0.0 - 3.1.7",
|
||||
"nodes": [
|
||||
"node_modules/fast-uri"
|
||||
],
|
||||
"fixAvailable": true
|
||||
},
|
||||
"hono": {
|
||||
"name": "hono",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1240640,
|
||||
"name": "hono",
|
||||
"dependency": "hono",
|
||||
"title": "hono/jsx renders plain strings unescaped in boundary components, leading to XSS",
|
||||
"url": "https://github.com/advisories/GHSA-hxh3-vqpv-xpqv",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-79"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 4.7,
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
|
||||
},
|
||||
"range": "<4.13.7"
|
||||
}
|
||||
],
|
||||
"effects": [],
|
||||
"range": "<4.13.7",
|
||||
"nodes": [
|
||||
"node_modules/hono"
|
||||
],
|
||||
"fixAvailable": true
|
||||
},
|
||||
"ip-address": {
|
||||
"name": "ip-address",
|
||||
"severity": "moderate",
|
||||
"isDirect": false,
|
||||
"via": [
|
||||
{
|
||||
"source": 1239948,
|
||||
"name": "ip-address",
|
||||
"dependency": "ip-address",
|
||||
"title": "ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts",
|
||||
"url": "https://github.com/advisories/GHSA-rpw4-54j3-4h4q",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-697",
|
||||
"CWE-918"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 0,
|
||||
"vectorString": null
|
||||
},
|
||||
"range": "<=10.5.0"
|
||||
},
|
||||
{
|
||||
"source": 1239949,
|
||||
"name": "ip-address",
|
||||
"dependency": "ip-address",
|
||||
"title": "ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass",
|
||||
"url": "https://github.com/advisories/GHSA-2vr4-cq9g-pvrc",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-918"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 0,
|
||||
"vectorString": null
|
||||
},
|
||||
"range": ">=10.2.0 <=10.5.0"
|
||||
},
|
||||
{
|
||||
"source": 1240097,
|
||||
"name": "ip-address",
|
||||
"dependency": "ip-address",
|
||||
"title": "ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range",
|
||||
"url": "https://github.com/advisories/GHSA-j6r3-76f7-8jcv",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-697",
|
||||
"CWE-843"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 0,
|
||||
"vectorString": null
|
||||
},
|
||||
"range": "<=10.7.0"
|
||||
},
|
||||
{
|
||||
"source": 1240098,
|
||||
"name": "ip-address",
|
||||
"dependency": "ip-address",
|
||||
"title": "ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process",
|
||||
"url": "https://github.com/advisories/GHSA-h3mg-xc3c-68pw",
|
||||
"severity": "moderate",
|
||||
"cwe": [
|
||||
"CWE-400",
|
||||
"CWE-770"
|
||||
],
|
||||
"cvss": {
|
||||
"score": 0,
|
||||
"vectorString": null
|
||||
},
|
||||
"range": "<=10.7.0"
|
||||
}
|
||||
],
|
||||
"effects": [],
|
||||
"range": "<=10.7.0",
|
||||
"nodes": [
|
||||
"node_modules/ip-address"
|
||||
],
|
||||
"fixAvailable": true
|
||||
}
|
||||
},
|
||||
"metadata": {
|
||||
"vulnerabilities": {
|
||||
"info": 0,
|
||||
"low": 0,
|
||||
"moderate": 3,
|
||||
"high": 2,
|
||||
"critical": 0,
|
||||
"total": 5
|
||||
},
|
||||
"dependencies": {
|
||||
"prod": 171,
|
||||
"dev": 501,
|
||||
"optional": 84,
|
||||
"peer": 1,
|
||||
"peerOptional": 0,
|
||||
"total": 680
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,51 @@
|
||||
[
|
||||
{
|
||||
"name": "umt-app-1",
|
||||
"image": "uhd-media-tool:v0.3.8",
|
||||
"imageId": "sha256:6f4f73d8ea53057cdf5bf4aa2904a360ea953adb1270a7b9f783a757b7e70559",
|
||||
"health": "healthy",
|
||||
"status": "running"
|
||||
},
|
||||
{
|
||||
"name": "umt-postgres-1",
|
||||
"image": "postgres:18.6-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873",
|
||||
"imageId": "sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873",
|
||||
"health": "healthy",
|
||||
"status": "running"
|
||||
},
|
||||
{
|
||||
"name": "umt-dev-postgres-1",
|
||||
"image": "postgres:18.6-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873",
|
||||
"imageId": "sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873",
|
||||
"health": "healthy",
|
||||
"status": "running"
|
||||
},
|
||||
{
|
||||
"name": "umt-camofox-1",
|
||||
"image": "umt-browser-desktop:1.18.0",
|
||||
"imageId": "sha256:eb6c8e8e43e573ad5e3223619b77328e12fb54fe40c283b9de02c7f6d03f5cda",
|
||||
"health": "healthy",
|
||||
"status": "running"
|
||||
},
|
||||
{
|
||||
"name": "umt-qbittorrent-1",
|
||||
"image": "lscr.io/linuxserver/qbittorrent:5.2.4@sha256:b522f9f4b769f8f36d49d22d5eb6a92e9aa18904c6a1830b1439df511ec21983",
|
||||
"imageId": "sha256:b522f9f4b769f8f36d49d22d5eb6a92e9aa18904c6a1830b1439df511ec21983",
|
||||
"health": null,
|
||||
"status": "running"
|
||||
},
|
||||
{
|
||||
"name": "umt-caddy-1",
|
||||
"image": "caddy:2.11.4-alpine@sha256:6aeddd44c3078b0f9a35206472a11420648a79c184603ef95957d0a20044cb2b",
|
||||
"imageId": "sha256:6aeddd44c3078b0f9a35206472a11420648a79c184603ef95957d0a20044cb2b",
|
||||
"health": null,
|
||||
"status": "running"
|
||||
},
|
||||
{
|
||||
"name": "umt-proxy-relay-1",
|
||||
"image": "alpine/socat:1.8.1.3@sha256:5ffbd6ae916cbad86a58fabe0d6d5a6fd5c2b47ddf031e82996baac9300e732f",
|
||||
"imageId": "sha256:5ffbd6ae916cbad86a58fabe0d6d5a6fd5c2b47ddf031e82996baac9300e732f",
|
||||
"health": null,
|
||||
"status": "running"
|
||||
}
|
||||
]
|
||||
@@ -0,0 +1,59 @@
|
||||
package,declared,locked,registry_latest,candidate,decision
|
||||
@biomejs/biome,2.5.14,2.5.14,2.5.15,2.5.15,候选升级，未验证
|
||||
@earendil-works/pi-agent-core,0.87.1,0.87.1,0.99.2,0.99.2,同步升级并验证嵌入接口；另评估 pi-mcp SDK
|
||||
@earendil-works/pi-ai,0.87.1,0.87.1,0.99.2,0.99.2,同步升级并验证嵌入接口；另评估 pi-mcp SDK
|
||||
@fontsource-variable/inter-tight,^5.2.7,5.3.0,5.3.0,5.3.0,保持
|
||||
@fontsource-variable/space-grotesk,^5.2.10,5.3.0,5.3.0,5.3.0,保持
|
||||
@hono/swagger-ui,0.6.1,0.6.1,0.6.1,0.6.1,保持
|
||||
@hono/zod-openapi,1.6.3,1.6.3,1.6.3,1.6.3,保持
|
||||
@modelcontextprotocol/sdk,1.30.1,1.30.1,1.31.0,1.31.0,候选升级，未验证
|
||||
@react-router/dev,7.12.0,7.12.0,8.4.0,7.18.4,先同主版本安全修复；8.4.0 另评估
|
||||
@react-router/node,7.12.0,7.12.0,8.4.0,7.18.4,先同主版本安全修复；8.4.0 另评估
|
||||
@simplewebauthn/browser,^13.3.0,13.3.0,14.0.0,14.0.0,独立兼容评估后决定，不直接更新
|
||||
@simplewebauthn/server,13.3.3,13.3.3,14.0.3,14.0.3,独立兼容评估后决定，不直接更新
|
||||
@tailwindcss/vite,^4.1.13,4.3.3,4.3.3,4.3.3,保持
|
||||
@tanstack/react-query,^5.90.21,5.104.0,5.104.0,5.104.0,保持
|
||||
@types/node,24.19.0,24.19.0,26.6.3,24.x,维持与 Node 24 兼容目标；不跟随 26
|
||||
@types/nunjucks,3.2.6,3.2.6,3.2.6,3.2.6,保持
|
||||
@types/pg,8.23.1,8.23.1,8.23.1,8.23.1,保持
|
||||
@types/react,^19.2.7,19.3.0,19.3.0,19.3.0,保持
|
||||
@types/react-dom,^19.2.3,19.3.0,19.3.0,19.3.0,保持
|
||||
@xmldom/xmldom,0.9.12,0.9.12,0.9.12,0.9.12,保持
|
||||
cheerio,1.2.0,1.2.0,1.2.0,1.2.0,保持
|
||||
class-variance-authority,~0.7.1,0.7.1,0.7.1,0.7.1,保持
|
||||
clsx,^2.1.1,2.1.1,2.1.1,2.1.1,保持
|
||||
date-fns,^4.1.0,4.4.0,4.4.0,4.4.0,保持
|
||||
fast-xml-parser,5.11.1,5.11.1,5.11.2,5.11.2,候选升级，未验证
|
||||
hash-wasm,4.12.0,4.12.0,4.12.0,4.12.0,保持
|
||||
hono,4.13.9,4.13.9,4.13.12,4.13.12,候选升级，未验证
|
||||
isbot,^5.1.31,5.2.2,5.2.2,5.2.2,保持
|
||||
jpeg-js,0.4.4,0.4.4,0.4.4,0.4.4,保持
|
||||
kysely,0.29.6,0.29.6,0.29.6,0.29.6,保持
|
||||
lucide-react,0.576,0.576.0,1.49.0,1.49.0,独立兼容评估后决定，不直接更新
|
||||
next-themes,~0.4.6,0.4.6,0.4.6,0.4.6,保持
|
||||
nunjucks,3.2.4,3.2.4,3.2.4,3.2.4,保持
|
||||
openworkflow,0.10.1,0.10.1,0.10.1,0.10.1,保持
|
||||
pg,8.23.0,8.23.0,8.23.1,8.23.1,候选升级，未验证
|
||||
pino,10.3.1,10.3.1,10.3.1,10.3.1,保持
|
||||
pino-pretty,13.1.3,13.1.3,13.1.3,13.1.3,保持
|
||||
playwright-core,1.63.0,1.63.0,1.63.0,1.63.0,保持
|
||||
postgres,3.4.9,3.4.9,3.4.9,3.4.9,保持
|
||||
qr-code-styling,^1.9.2,1.9.2,1.9.2,1.9.2,保持
|
||||
radix-ui,^1.4.3,1.6.7,1.6.7,1.6.7,保持
|
||||
react,^19.2.4,19.3.0,19.3.0,19.3.0,保持
|
||||
react-day-picker,^10.0.1,10.0.1,10.0.2,10.0.2,候选升级，未验证
|
||||
react-dom,^19.2.4,19.3.0,19.3.0,19.3.0,保持
|
||||
react-router,7.12.0,7.12.0,8.4.0,7.18.4,先同主版本安全修复；8.4.0 另评估
|
||||
recharts,^3.10.1,3.10.1,3.10.1,3.10.1,保持
|
||||
sonner,^2.0.7,2.0.8,2.0.8,2.0.8,保持
|
||||
tailwind-merge,^3.5.0,3.7.0,3.7.0,3.7.0,保持
|
||||
tailwindcss,^4.1.13,4.3.3,4.3.3,4.3.3,保持
|
||||
tw-animate-css,^1.4.0,1.4.0,1.4.0,1.4.0,保持
|
||||
typebox,1.3.27,1.3.27,1.3.34,1.3.34,候选升级，未验证
|
||||
typescript,7.0.2,7.0.2,7.0.2,7.0.2,保持
|
||||
vite,^7.1.7,7.3.6,8.3.1,8.3.1,独立兼容评估后决定，不直接更新
|
||||
vite-tsconfig-paths,^5.1.4,5.1.4,6.1.1,6.1.1,独立兼容评估后决定，不直接更新
|
||||
vitest,5.0.2,5.0.2,5.0.3,5.0.3,候选升级，未验证
|
||||
xpath,0.0.34,0.0.34,0.0.34,0.0.34,保持
|
||||
yaml,2.9.1,2.9.1,2.9.1,2.9.1,保持
|
||||
zod,4.6.5;^4.3.6,4.6.5,4.6.5,4.6.5,保持
|
||||
|
@@ -0,0 +1,634 @@
|
||||
package,locked_versions,registry_latest,workspace_direct,has_older_or_different_version
|
||||
@anthropic-ai/sdk,0.124.0,0.131.0,False,True
|
||||
@asteasolutions/zod-to-openapi,9.1.0,9.1.0,False,False
|
||||
@aws-sdk/client-bedrock-runtime,3.1127.0,3.1144.0,False,True
|
||||
@aws-sdk/core,3.978.1,3.978.1,False,False
|
||||
@aws-sdk/credential-provider-env,3.972.72,3.972.72,False,False
|
||||
@aws-sdk/credential-provider-http,3.972.74,3.972.74,False,False
|
||||
@aws-sdk/credential-provider-ini,3.973.17,3.973.17,False,False
|
||||
@aws-sdk/credential-provider-login,3.972.79,3.972.79,False,False
|
||||
@aws-sdk/credential-provider-node,3.972.84,3.972.84,False,False
|
||||
@aws-sdk/credential-provider-process,3.972.72,3.972.72,False,False
|
||||
@aws-sdk/credential-provider-sso,3.973.16,3.973.16,False,False
|
||||
@aws-sdk/credential-provider-web-identity,3.972.78,3.972.78,False,False
|
||||
@aws-sdk/eventstream-handler-node,3.972.35,3.972.35,False,False
|
||||
@aws-sdk/middleware-eventstream,3.972.30,3.972.30,False,False
|
||||
@aws-sdk/middleware-websocket,3.972.54,3.972.54,False,False
|
||||
@aws-sdk/nested-clients,3.997.46,3.997.46,False,False
|
||||
@aws-sdk/signature-v4-multi-region,3.996.47,3.996.47,False,False
|
||||
@aws-sdk/token-providers,3.1127.0;3.1138.0,3.1144.0,False,True
|
||||
@aws-sdk/types,3.974.6,3.974.6,False,False
|
||||
@aws-sdk/xml-builder,3.972.41,3.972.41,False,False
|
||||
@aws/lambda-invoke-store,0.3.0,0.3.0,False,False
|
||||
@babel/code-frame,7.29.7,8.0.6,False,True
|
||||
@babel/compat-data,7.29.7,8.0.5,False,True
|
||||
@babel/core,7.29.7,8.0.6,False,True
|
||||
@babel/generator,7.29.8,8.0.6,False,True
|
||||
@babel/helper-annotate-as-pure,7.29.7,8.0.0,False,True
|
||||
@babel/helper-compilation-targets,7.29.7,8.0.6,False,True
|
||||
@babel/helper-create-class-features-plugin,7.29.7,8.0.6,False,True
|
||||
@babel/helper-globals,7.29.7,8.0.6,False,True
|
||||
@babel/helper-member-expression-to-functions,7.29.7,8.0.5,False,True
|
||||
@babel/helper-module-imports,7.29.7,8.0.0,False,True
|
||||
@babel/helper-module-transforms,7.29.7,8.0.6,False,True
|
||||
@babel/helper-optimise-call-expression,7.29.7,8.0.0,False,True
|
||||
@babel/helper-plugin-utils,7.29.7,8.0.1,False,True
|
||||
@babel/helper-replace-supers,7.29.7,8.0.1,False,True
|
||||
@babel/helper-skip-transparent-expression-wrappers,7.29.7,8.0.0,False,True
|
||||
@babel/helper-string-parser,7.29.7,8.0.6,False,True
|
||||
@babel/helper-validator-identifier,7.29.7,8.0.6,False,True
|
||||
@babel/helper-validator-option,7.29.7,8.0.0,False,True
|
||||
@babel/helpers,7.29.7,8.0.5,False,True
|
||||
@babel/parser,7.29.9,7.29.9,False,False
|
||||
@babel/plugin-syntax-jsx,7.29.7,8.0.1,False,True
|
||||
@babel/plugin-syntax-typescript,7.29.7,8.0.3,False,True
|
||||
@babel/plugin-transform-modules-commonjs,7.29.7,8.0.1,False,True
|
||||
@babel/plugin-transform-typescript,7.29.9,7.29.9,False,False
|
||||
@babel/preset-typescript,7.29.7,8.0.1,False,True
|
||||
@babel/runtime,7.29.7,8.0.5,False,True
|
||||
@babel/template,7.29.7,8.0.0,False,True
|
||||
@babel/traverse,7.29.8,8.0.6,False,True
|
||||
@babel/types,7.29.8,8.0.6,False,True
|
||||
@biomejs/biome,2.5.14,2.5.15,True,True
|
||||
@biomejs/cli-darwin-arm64,2.5.14,2.5.15,False,True
|
||||
@biomejs/cli-darwin-x64,2.5.14,2.5.15,False,True
|
||||
@biomejs/cli-linux-arm64,2.5.14,2.5.15,False,True
|
||||
@biomejs/cli-linux-arm64-musl,2.5.14,2.5.15,False,True
|
||||
@biomejs/cli-linux-x64,2.5.14,2.5.15,False,True
|
||||
@biomejs/cli-linux-x64-musl,2.5.14,2.5.15,False,True
|
||||
@biomejs/cli-win32-arm64,2.5.14,2.5.15,False,True
|
||||
@biomejs/cli-win32-x64,2.5.14,2.5.15,False,True
|
||||
@date-fns/tz,1.5.0,1.5.0,False,False
|
||||
@earendil-works/chord,0.87.1,0.99.2,False,True
|
||||
@earendil-works/pi-agent-core,0.87.1,0.99.2,True,True
|
||||
@earendil-works/pi-ai,0.87.1,0.99.2,True,True
|
||||
@earendil-works/pi-telemetry,0.87.1,0.99.2,False,True
|
||||
@esbuild/aix-ppc64,0.28.2,0.28.2,False,False
|
||||
@esbuild/android-arm,0.28.2,0.28.2,False,False
|
||||
@esbuild/android-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/android-x64,0.28.2,0.28.2,False,False
|
||||
@esbuild/darwin-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/darwin-x64,0.28.2,0.28.2,False,False
|
||||
@esbuild/freebsd-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/freebsd-x64,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-arm,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-ia32,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-loong64,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-mips64el,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-ppc64,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-riscv64,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-s390x,0.28.2,0.28.2,False,False
|
||||
@esbuild/linux-x64,0.28.2,0.28.2,False,False
|
||||
@esbuild/netbsd-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/netbsd-x64,0.28.2,0.28.2,False,False
|
||||
@esbuild/openbsd-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/openbsd-x64,0.28.2,0.28.2,False,False
|
||||
@esbuild/openharmony-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/sunos-x64,0.28.2,0.28.2,False,False
|
||||
@esbuild/win32-arm64,0.28.2,0.28.2,False,False
|
||||
@esbuild/win32-ia32,0.28.2,0.28.2,False,False
|
||||
@esbuild/win32-x64,0.28.2,0.28.2,False,False
|
||||
@floating-ui/core,1.8.0,1.8.0,False,False
|
||||
@floating-ui/dom,1.8.0,1.8.0,False,False
|
||||
@floating-ui/react-dom,2.1.9,2.1.9,False,False
|
||||
@floating-ui/utils,0.2.12,0.2.12,False,False
|
||||
@fontsource-variable/inter-tight,5.3.0,5.3.0,True,False
|
||||
@fontsource-variable/space-grotesk,5.3.0,5.3.0,True,False
|
||||
@google/genai,2.21.0,2.25.0,False,True
|
||||
@hexagon/base64,1.1.28,2.0.4,False,True
|
||||
@hono/node-server,2.1.1,2.1.3,False,True
|
||||
@hono/swagger-ui,0.6.1,0.6.1,True,False
|
||||
@hono/zod-openapi,1.6.3,1.6.3,True,False
|
||||
@hono/zod-validator,0.9.1,0.9.1,False,False
|
||||
@jridgewell/gen-mapping,0.3.13,0.3.13,False,False
|
||||
@jridgewell/remapping,2.3.5,2.3.5,False,False
|
||||
@jridgewell/resolve-uri,3.1.2,3.1.2,False,False
|
||||
@jridgewell/sourcemap-codec,1.6.0,1.6.0,False,False
|
||||
@jridgewell/trace-mapping,0.3.31,0.3.31,False,False
|
||||
@levischuck/tiny-cbor,0.2.11,0.3.6,False,True
|
||||
@mjackson/node-fetch-server,0.2.0,0.7.0,False,True
|
||||
@modelcontextprotocol/sdk,1.30.1,1.31.0,True,True
|
||||
@napi-rs/lzma-linux-x64-gnu,1.5.1,1.5.1,False,False
|
||||
@nodable/entities,3.0.0,3.1.0,False,True
|
||||
@peculiar/asn1-android,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-cms,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-csr,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-ecc,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-pfx,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-pkcs8,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-pkcs9,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-rsa,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-schema,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-x509,2.9.5,2.10.0,False,True
|
||||
@peculiar/asn1-x509-attr,2.9.5,2.10.0,False,True
|
||||
@peculiar/utils,2.0.3,2.0.3,False,False
|
||||
@peculiar/x509,1.14.3,2.1.0,False,True
|
||||
@pinojs/redact,0.4.0,0.4.0,False,False
|
||||
@protobufjs/aspromise,1.1.2,1.1.2,False,False
|
||||
@protobufjs/base64,1.1.2,1.1.2,False,False
|
||||
@protobufjs/codegen,2.0.5,2.0.5,False,False
|
||||
@protobufjs/eventemitter,1.1.1,1.1.1,False,False
|
||||
@protobufjs/fetch,1.1.1,1.1.1,False,False
|
||||
@protobufjs/float,1.0.2,1.0.2,False,False
|
||||
@protobufjs/path,1.1.2,1.1.2,False,False
|
||||
@protobufjs/pool,1.1.0,1.1.0,False,False
|
||||
@protobufjs/utf8,1.1.2,1.1.2,False,False
|
||||
@radix-ui/number,1.1.3,1.1.3,False,False
|
||||
@radix-ui/primitive,1.1.7,1.1.7,False,False
|
||||
@radix-ui/react-accessible-icon,1.1.15,1.1.15,False,False
|
||||
@radix-ui/react-accordion,1.2.20,1.2.20,False,False
|
||||
@radix-ui/react-alert-dialog,1.1.23,1.1.23,False,False
|
||||
@radix-ui/react-arrow,1.1.15,1.1.15,False,False
|
||||
@radix-ui/react-aspect-ratio,1.1.15,1.1.15,False,False
|
||||
@radix-ui/react-avatar,1.2.6,1.2.6,False,False
|
||||
@radix-ui/react-checkbox,1.3.11,1.3.11,False,False
|
||||
@radix-ui/react-collapsible,1.1.20,1.1.20,False,False
|
||||
@radix-ui/react-collection,1.1.15,1.1.15,False,False
|
||||
@radix-ui/react-compose-refs,1.1.5,1.1.5,False,False
|
||||
@radix-ui/react-context,1.2.2,1.2.2,False,False
|
||||
@radix-ui/react-context-menu,2.3.7,2.3.7,False,False
|
||||
@radix-ui/react-dialog,1.1.23,1.1.23,False,False
|
||||
@radix-ui/react-direction,1.1.4,1.1.4,False,False
|
||||
@radix-ui/react-dismissable-layer,1.1.19,1.1.19,False,False
|
||||
@radix-ui/react-dropdown-menu,2.1.24,2.1.24,False,False
|
||||
@radix-ui/react-focus-guards,1.1.6,1.1.6,False,False
|
||||
@radix-ui/react-focus-scope,1.1.16,1.1.16,False,False
|
||||
@radix-ui/react-form,0.1.16,0.1.16,False,False
|
||||
@radix-ui/react-hover-card,1.1.23,1.1.23,False,False
|
||||
@radix-ui/react-id,1.1.4,1.1.4,False,False
|
||||
@radix-ui/react-label,2.1.15,2.1.15,False,False
|
||||
@radix-ui/react-menu,2.1.24,2.1.24,False,False
|
||||
@radix-ui/react-menubar,1.1.24,1.1.24,False,False
|
||||
@radix-ui/react-navigation-menu,1.2.22,1.2.22,False,False
|
||||
@radix-ui/react-one-time-password-field,0.1.16,0.1.16,False,False
|
||||
@radix-ui/react-password-toggle-field,0.1.11,0.1.11,False,False
|
||||
@radix-ui/react-popover,1.1.23,1.1.23,False,False
|
||||
@radix-ui/react-popper,1.3.7,1.3.7,False,False
|
||||
@radix-ui/react-portal,1.1.17,1.1.17,False,False
|
||||
@radix-ui/react-presence,1.1.10,1.1.10,False,False
|
||||
@radix-ui/react-primitive,2.1.10,2.1.10,False,False
|
||||
@radix-ui/react-progress,1.1.16,1.1.16,False,False
|
||||
@radix-ui/react-radio-group,1.4.7,1.4.7,False,False
|
||||
@radix-ui/react-roving-focus,1.1.19,1.1.19,False,False
|
||||
@radix-ui/react-scroll-area,1.2.18,1.2.18,False,False
|
||||
@radix-ui/react-select,2.3.7,2.3.7,False,False
|
||||
@radix-ui/react-separator,1.1.15,1.1.15,False,False
|
||||
@radix-ui/react-slider,1.4.7,1.4.7,False,False
|
||||
@radix-ui/react-slot,1.3.3,1.3.3,False,False
|
||||
@radix-ui/react-switch,1.3.7,1.3.7,False,False
|
||||
@radix-ui/react-tabs,1.1.21,1.1.21,False,False
|
||||
@radix-ui/react-toast,1.2.23,1.2.23,False,False
|
||||
@radix-ui/react-toggle,1.1.18,1.1.18,False,False
|
||||
@radix-ui/react-toggle-group,1.1.19,1.1.19,False,False
|
||||
@radix-ui/react-toolbar,1.1.19,1.1.19,False,False
|
||||
@radix-ui/react-tooltip,1.2.16,1.2.16,False,False
|
||||
@radix-ui/react-use-callback-ref,1.1.4,1.1.4,False,False
|
||||
@radix-ui/react-use-controllable-state,1.2.6,1.2.6,False,False
|
||||
@radix-ui/react-use-effect-event,0.0.5,0.0.5,False,False
|
||||
@radix-ui/react-use-escape-keydown,1.1.5,1.1.5,False,False
|
||||
@radix-ui/react-use-is-hydrated,0.1.3,0.1.3,False,False
|
||||
@radix-ui/react-use-layout-effect,1.1.4,1.1.4,False,False
|
||||
@radix-ui/react-use-previous,1.1.4,1.1.4,False,False
|
||||
@radix-ui/react-use-rect,1.1.4,1.1.4,False,False
|
||||
@radix-ui/react-use-size,1.1.4,1.1.4,False,False
|
||||
@radix-ui/react-visually-hidden,1.2.11,1.2.11,False,False
|
||||
@radix-ui/rect,1.1.3,1.1.3,False,False
|
||||
@react-router/dev,7.12.0,8.4.0,True,True
|
||||
@react-router/node,7.12.0,8.4.0,True,True
|
||||
@reduxjs/toolkit,2.12.0,2.13.0,False,True
|
||||
@remix-run/node-fetch-server,0.9.0,0.14.2,False,True
|
||||
@rollup/rollup-android-arm-eabi,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-android-arm64,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-darwin-arm64,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-darwin-x64,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-freebsd-arm64,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-freebsd-x64,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-arm-gnueabihf,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-arm-musleabihf,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-arm64-gnu,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-arm64-musl,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-loong64-gnu,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-loong64-musl,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-ppc64-gnu,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-ppc64-musl,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-riscv64-gnu,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-riscv64-musl,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-s390x-gnu,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-x64-gnu,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-linux-x64-musl,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-openbsd-x64,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-openharmony-arm64,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-win32-arm64-msvc,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-win32-ia32-msvc,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-win32-x64-gnu,4.63.5,4.63.5,False,False
|
||||
@rollup/rollup-win32-x64-msvc,4.63.5,4.63.5,False,False
|
||||
@simplewebauthn/browser,13.3.0,14.0.0,True,True
|
||||
@simplewebauthn/server,13.3.3,14.0.3,True,True
|
||||
@smithy/core,3.35.0,3.35.1,False,True
|
||||
@smithy/credential-provider-imds,4.5.2,4.5.2,False,False
|
||||
@smithy/fetch-http-handler,5.8.0,5.8.0,False,False
|
||||
@smithy/node-http-handler,4.12.1,4.12.1,False,False
|
||||
@smithy/signature-v4,5.7.4,5.7.4,False,False
|
||||
@smithy/types,4.19.0,4.19.0,False,False
|
||||
@stablelib/base64,1.0.1,2.0.1,False,True
|
||||
@standard-schema/spec,1.1.0,1.1.0,False,False
|
||||
@standard-schema/utils,0.3.0,0.3.0,False,False
|
||||
@tailwindcss/node,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-android-arm64,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-darwin-arm64,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-darwin-x64,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-freebsd-x64,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-linux-arm-gnueabihf,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-linux-arm64-gnu,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-linux-arm64-musl,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-linux-x64-gnu,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-linux-x64-musl,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-wasm32-wasi,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-win32-arm64-msvc,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/oxide-win32-x64-msvc,4.3.3,4.3.3,False,False
|
||||
@tailwindcss/vite,4.3.3,4.3.3,True,False
|
||||
@tanstack/query-core,5.104.0,5.104.0,False,False
|
||||
@tanstack/react-query,5.104.0,5.104.0,True,False
|
||||
@types/chai,5.2.3,5.2.3,False,False
|
||||
@types/d3-array,3.2.2,3.2.2,False,False
|
||||
@types/d3-color,3.1.3,3.1.3,False,False
|
||||
@types/d3-ease,3.0.2,3.0.2,False,False
|
||||
@types/d3-interpolate,3.0.4,3.0.4,False,False
|
||||
@types/d3-path,3.1.1,3.1.1,False,False
|
||||
@types/d3-scale,4.0.9,4.0.9,False,False
|
||||
@types/d3-shape,3.2.0,3.2.0,False,False
|
||||
@types/d3-time,3.0.4,3.0.4,False,False
|
||||
@types/d3-timer,3.0.2,3.0.2,False,False
|
||||
@types/deep-eql,4.0.2,4.0.2,False,False
|
||||
@types/estree,1.0.9,1.0.9,False,False
|
||||
@types/node,24.19.0,26.6.3,True,True
|
||||
@types/nunjucks,3.2.6,3.2.6,True,False
|
||||
@types/pg,8.23.1,8.23.1,True,False
|
||||
@types/react,19.3.0,19.3.0,True,False
|
||||
@types/react-dom,19.3.0,19.3.0,True,False
|
||||
@types/retry,0.12.0,0.12.5,False,True
|
||||
@types/use-sync-external-store,0.0.6,1.7.0,False,True
|
||||
@typescript/typescript-aix-ppc64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-darwin-arm64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-darwin-x64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-freebsd-arm64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-freebsd-x64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-arm,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-arm64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-loong64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-mips64el,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-ppc64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-riscv64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-s390x,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-linux-x64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-netbsd-arm64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-netbsd-x64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-openbsd-arm64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-openbsd-x64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-sunos-x64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-win32-arm64,7.0.2,7.0.2,False,False
|
||||
@typescript/typescript-win32-x64,7.0.2,7.0.2,False,False
|
||||
@vitest/mocker,5.0.2,5.0.3,False,True
|
||||
@vitest/spy,5.0.2,5.0.3,False,True
|
||||
@xmldom/xmldom,0.9.12,0.9.12,True,False
|
||||
a-sync-waterfall,1.0.1,1.0.1,False,False
|
||||
accepts,2.0.0,1.3.8,False,True
|
||||
agent-base,7.1.4;9.0.0,9.0.0,False,True
|
||||
ajv,8.20.0,8.20.0,False,False
|
||||
ajv-formats,3.0.1,3.0.1,False,False
|
||||
anynum,1.0.1,1.0.1,False,False
|
||||
arg,5.0.2,5.0.2,False,False
|
||||
aria-hidden,1.2.6,1.2.6,False,False
|
||||
asap,2.0.6,2.0.6,False,False
|
||||
asn1js,3.0.10,3.0.10,False,False
|
||||
assertion-error,2.0.1,2.0.1,False,False
|
||||
atomic-sleep,1.0.0,1.0.0,False,False
|
||||
babel-dead-code-elimination,1.0.12,2.0.0,False,True
|
||||
base64-js,1.5.1,1.5.1,False,False
|
||||
baseline-browser-mapping,2.11.26,2.11.26,False,False
|
||||
bignumber.js,9.3.1,11.1.5,False,True
|
||||
body-parser,2.3.0,2.3.0,False,False
|
||||
boolbase,1.0.0,2.0.0,False,True
|
||||
bowser,2.14.1,2.14.1,False,False
|
||||
browserslist,4.29.1,4.29.3,False,True
|
||||
buffer-equal-constant-time,1.0.1,1.0.1,False,False
|
||||
bytes,3.1.2,3.1.2,False,False
|
||||
cac,6.7.14,7.0.0,False,True
|
||||
call-bind-apply-helpers,1.0.2,1.0.2,False,False
|
||||
call-bound,1.0.4,1.0.4,False,False
|
||||
caniuse-lite,1.0.30001812,1.0.30001814,False,True
|
||||
chai,6.2.2,6.3.0,False,True
|
||||
cheerio,1.2.0,1.2.0,True,False
|
||||
cheerio-select,2.1.0,2.1.0,False,False
|
||||
chokidar,4.0.3,5.0.0,False,True
|
||||
class-variance-authority,0.7.1,0.7.1,True,False
|
||||
clsx,2.1.1,2.1.1,True,False
|
||||
colorette,2.0.20,2.0.20,False,False
|
||||
commander,5.1.0,15.0.0,False,True
|
||||
confbox,0.3.1,0.3.1,False,False
|
||||
content-disposition,1.1.0,3.0.0,False,True
|
||||
content-type,1.0.5;2.1.0,3.1.1,False,True
|
||||
convert-source-map,2.0.0,2.0.0,False,False
|
||||
cookie,0.7.2;1.1.1,2.0.1,False,True
|
||||
cookie-signature,1.2.2,1.2.2,False,False
|
||||
cors,2.8.6,2.8.6,False,False
|
||||
cross-spawn,7.0.6,7.0.6,False,False
|
||||
css-select,5.2.2,7.0.0,False,True
|
||||
css-what,6.2.2,8.0.0,False,True
|
||||
csstype,3.2.3,3.2.3,False,False
|
||||
d3-array,3.2.4,3.2.4,False,False
|
||||
d3-color,3.1.0,3.1.0,False,False
|
||||
d3-ease,3.0.1,3.0.1,False,False
|
||||
d3-format,3.1.2,3.1.2,False,False
|
||||
d3-interpolate,3.0.1,3.0.1,False,False
|
||||
d3-path,3.1.0,3.1.0,False,False
|
||||
d3-scale,4.0.2,4.0.2,False,False
|
||||
d3-shape,3.2.0,3.2.0,False,False
|
||||
d3-time,3.1.0,3.1.0,False,False
|
||||
d3-time-format,4.1.0,4.1.0,False,False
|
||||
d3-timer,3.0.1,3.0.1,False,False
|
||||
data-uri-to-buffer,4.0.1,8.0.0,False,True
|
||||
date-fns,4.4.0,4.4.0,True,False
|
||||
dateformat,4.6.3,5.0.3,False,True
|
||||
debug,4.4.3,4.4.3,False,False
|
||||
decimal.js-light,2.5.1,2.5.1,False,False
|
||||
dedent,1.7.2,1.7.2,False,False
|
||||
depd,2.0.0,2.0.0,False,False
|
||||
detect-libc,2.1.2,2.1.2,False,False
|
||||
detect-node-es,1.1.0,1.1.0,False,False
|
||||
diff,8.0.4,9.0.0,False,True
|
||||
dom-serializer,2.0.0,3.1.1,False,True
|
||||
domelementtype,2.3.0,3.0.0,False,True
|
||||
domhandler,5.0.3,6.0.1,False,True
|
||||
domutils,3.2.2,4.0.2,False,True
|
||||
dunder-proto,1.0.1,1.0.1,False,False
|
||||
ecdsa-sig-formatter,1.0.11,1.0.11,False,False
|
||||
ee-first,1.1.1,1.1.1,False,False
|
||||
electron-to-chromium,1.5.439,1.5.443,False,True
|
||||
encodeurl,2.0.0,2.0.0,False,False
|
||||
encoding-sniffer,0.2.1,1.0.2,False,True
|
||||
end-of-stream,1.4.5,1.4.5,False,False
|
||||
enhanced-resolve,5.25.1,5.26.0,False,True
|
||||
entities,4.5.0;6.0.1;7.0.1,8.1.0,False,True
|
||||
es-define-property,1.0.1,1.0.1,False,False
|
||||
es-errors,1.3.0,1.3.0,False,False
|
||||
es-module-lexer,1.7.0;2.3.2,3.0.2,False,True
|
||||
es-object-atoms,1.1.2,1.1.2,False,False
|
||||
es-toolkit,1.52.0,1.52.0,False,False
|
||||
esbuild,0.28.2,0.28.2,False,False
|
||||
escalade,3.2.0,3.2.0,False,False
|
||||
escape-html,1.0.3,1.0.3,False,False
|
||||
estree-walker,3.0.3,3.0.3,False,False
|
||||
etag,1.8.1,1.8.1,False,False
|
||||
eventemitter3,5.0.4,5.0.4,False,False
|
||||
eventsource,3.0.7,5.1.2,False,True
|
||||
eventsource-parser,3.1.1,4.1.1,False,True
|
||||
exit-hook,2.2.1,5.1.0,False,True
|
||||
expect-type,1.4.0,1.4.0,False,False
|
||||
express,5.2.1,5.2.1,False,False
|
||||
express-rate-limit,8.7.0,8.7.0,False,False
|
||||
exsolve,1.1.1,1.1.1,False,False
|
||||
extend,3.0.2,3.0.2,False,False
|
||||
fast-copy,4.1.1,4.1.1,False,False
|
||||
fast-deep-equal,3.1.3,3.1.3,False,False
|
||||
fast-safe-stringify,2.1.1,2.1.1,False,False
|
||||
fast-sha256,1.3.0,1.3.0,False,False
|
||||
fast-uri,3.1.8,4.2.1,False,True
|
||||
fast-xml-builder,1.3.1,1.3.1,False,False
|
||||
fast-xml-parser,5.11.1,5.11.2,True,True
|
||||
fdir,6.5.0,6.5.0,False,False
|
||||
fetch-blob,3.2.0,4.0.0,False,True
|
||||
finalhandler,2.1.1,2.1.1,False,False
|
||||
formdata-polyfill,4.0.10,4.0.10,False,False
|
||||
forwarded,0.2.0,0.2.0,False,False
|
||||
fresh,2.0.0,0.5.2,False,True
|
||||
fsevents,2.3.3,2.3.3,False,False
|
||||
function-bind,1.1.2,1.1.2,False,False
|
||||
gaxios,7.3.1,8.1.0,False,True
|
||||
gcp-metadata,8.1.2,9.0.4,False,True
|
||||
gensync,1.0.0-beta.2,1.0.0-beta.2,False,False
|
||||
get-intrinsic,1.3.0,1.3.0,False,False
|
||||
get-nonce,1.0.1,1.0.1,False,False
|
||||
get-proto,1.0.1,1.0.1,False,False
|
||||
globrex,0.1.2,0.1.2,False,False
|
||||
google-auth-library,10.9.1,11.1.0,False,True
|
||||
google-logging-utils,1.1.3,2.0.1,False,True
|
||||
gopd,1.2.0,1.2.0,False,False
|
||||
graceful-fs,4.2.11,4.2.11,False,False
|
||||
has-symbols,1.1.0,1.1.0,False,False
|
||||
hash-wasm,4.12.0,4.12.0,True,False
|
||||
hasown,2.0.4,2.0.4,False,False
|
||||
help-me,5.0.0,5.0.0,False,False
|
||||
hono,4.13.9,4.13.12,True,True
|
||||
htmlparser2,10.1.0,12.0.0,False,True
|
||||
http-errors,2.0.1,2.0.1,False,False
|
||||
http-proxy-agent,9.1.0,9.1.0,False,False
|
||||
https-proxy-agent,7.0.6;9.1.0,9.1.0,False,True
|
||||
iconv-lite,0.6.3;0.7.3,0.7.3,False,True
|
||||
ignore,7.0.8,7.0.11,False,True
|
||||
immer,11.1.18,11.1.18,False,False
|
||||
inherits,2.0.4,2.0.4,False,False
|
||||
internmap,2.0.3,2.0.3,False,False
|
||||
ip-address,10.7.2,10.7.2,False,False
|
||||
ipaddr.js,1.9.1,2.5.0,False,True
|
||||
is-promise,4.0.0,4.0.0,False,False
|
||||
is-unsafe,2.0.2,2.0.2,False,False
|
||||
isbot,5.2.2,5.2.2,True,False
|
||||
isexe,2.0.0,4.0.0,False,True
|
||||
jiti,2.7.0,2.7.0,False,False
|
||||
jose,6.2.12,6.2.12,False,False
|
||||
joycon,3.1.1,3.1.1,False,False
|
||||
jpeg-js,0.4.4,0.4.4,True,False
|
||||
js-tokens,4.0.0,10.0.0,False,True
|
||||
jsesc,3.0.2,3.1.0,False,True
|
||||
json-bigint,1.0.0,1.0.0,False,False
|
||||
json-schema-to-ts,3.1.1,3.1.1,False,False
|
||||
json-schema-traverse,1.0.0,1.0.0,False,False
|
||||
json-schema-typed,8.0.2,8.0.2,False,False
|
||||
json5,2.2.3,2.2.3,False,False
|
||||
jwa,2.0.1,2.0.1,False,False
|
||||
jws,4.0.1,4.0.1,False,False
|
||||
kysely,0.29.6,0.29.6,True,False
|
||||
lightningcss,1.32.0,1.33.0,False,True
|
||||
lightningcss-android-arm64,1.32.0,1.33.0,False,True
|
||||
lightningcss-darwin-arm64,1.32.0,1.33.0,False,True
|
||||
lightningcss-darwin-x64,1.32.0,1.33.0,False,True
|
||||
lightningcss-freebsd-x64,1.32.0,1.33.0,False,True
|
||||
lightningcss-linux-arm-gnueabihf,1.32.0,1.33.0,False,True
|
||||
lightningcss-linux-arm64-gnu,1.32.0,1.33.0,False,True
|
||||
lightningcss-linux-arm64-musl,1.32.0,1.33.0,False,True
|
||||
lightningcss-linux-x64-gnu,1.32.0,1.33.0,False,True
|
||||
lightningcss-linux-x64-musl,1.32.0,1.33.0,False,True
|
||||
lightningcss-win32-arm64-msvc,1.32.0,1.33.0,False,True
|
||||
lightningcss-win32-x64-msvc,1.32.0,1.33.0,False,True
|
||||
lodash,4.18.1,4.18.1,False,False
|
||||
long,5.3.2,5.3.2,False,False
|
||||
lru-cache,5.1.1,11.5.3,False,True
|
||||
lucide-react,0.576.0,1.49.0,True,True
|
||||
magic-string,0.30.21;1.4.2,1.4.2,False,True
|
||||
math-intrinsics,1.1.0,1.1.0,False,False
|
||||
media-typer,1.1.1,2.0.0,False,True
|
||||
merge-descriptors,2.0.0,2.0.0,False,False
|
||||
mime-db,1.54.0,1.54.0,False,False
|
||||
mime-types,3.0.2,3.0.2,False,False
|
||||
minimist,1.2.8,1.2.8,False,False
|
||||
ms,2.1.3,2.1.3,False,False
|
||||
nanoid,3.3.19,6.0.1,False,True
|
||||
negotiator,1.1.0,1.1.0,False,False
|
||||
next-themes,0.4.6,0.4.6,True,False
|
||||
node-domexception,1.0.0,2.0.2,False,True
|
||||
node-fetch,3.3.2,3.3.2,False,False
|
||||
node-releases,2.0.57,2.0.57,False,False
|
||||
nth-check,2.1.1,3.0.1,False,True
|
||||
nunjucks,3.2.4,3.2.4,True,False
|
||||
object-assign,4.1.1,4.1.1,False,False
|
||||
object-inspect,1.13.4,1.13.4,False,False
|
||||
obug,2.2.1,3.0.0,False,True
|
||||
on-exit-leak-free,2.1.2,2.1.2,False,False
|
||||
on-finished,2.4.1,2.4.1,False,False
|
||||
once,1.4.0,1.4.0,False,False
|
||||
openai,6.40.0,7.25.0,False,True
|
||||
openapi3-ts,4.6.1,4.6.1,False,False
|
||||
openworkflow,0.10.1,0.10.1,True,False
|
||||
p-map,7.0.8,7.0.8,False,False
|
||||
p-retry,4.6.2,8.0.1,False,True
|
||||
parse5,7.3.0,8.0.1,False,True
|
||||
parse5-htmlparser2-tree-adapter,7.1.0,8.0.1,False,True
|
||||
parse5-parser-stream,7.1.2,8.0.0,False,True
|
||||
parseurl,1.3.3,1.3.3,False,False
|
||||
partial-json,0.1.7,0.1.7,False,False
|
||||
path-expression-matcher,1.6.2,1.6.2,False,False
|
||||
path-key,3.1.1,4.0.0,False,True
|
||||
path-to-regexp,8.4.2,8.4.2,False,False
|
||||
pathe,1.1.2;2.0.3,2.0.3,False,True
|
||||
pg,8.23.0,8.23.1,True,True
|
||||
pg-cloudflare,1.4.0,1.4.1,False,True
|
||||
pg-connection-string,2.14.0,2.14.1,False,True
|
||||
pg-int8,1.0.1,1.0.1,False,False
|
||||
pg-pool,3.14.0,3.14.0,False,False
|
||||
pg-protocol,1.16.0,1.16.1,False,True
|
||||
pg-types,2.2.0,4.1.0,False,True
|
||||
pgpass,1.0.5,1.0.6,False,True
|
||||
picocolors,1.1.1,1.1.1,False,False
|
||||
picomatch,4.0.7,4.0.7,False,False
|
||||
pino,10.3.1,10.3.1,True,False
|
||||
pino-abstract-transport,3.0.0,3.0.0,False,False
|
||||
pino-pretty,13.1.3,13.1.3,True,False
|
||||
pino-std-serializers,7.1.0,7.1.0,False,False
|
||||
pkce-challenge,5.0.1,6.0.0,False,True
|
||||
pkg-types,2.3.3,2.3.3,False,False
|
||||
playwright-core,1.63.0,1.63.0,True,False
|
||||
postcss,8.5.28,8.5.28,False,False
|
||||
postgres,3.4.9,3.4.9,True,False
|
||||
postgres-array,2.0.0,3.0.4,False,True
|
||||
postgres-bytea,1.0.1,3.0.0,False,True
|
||||
postgres-date,1.0.7,2.1.0,False,True
|
||||
postgres-interval,1.2.0,4.1.0,False,True
|
||||
prettier,3.9.9,3.9.9,False,False
|
||||
process-warning,5.1.0,5.1.0,False,False
|
||||
protobufjs,7.6.6,8.8.0,False,True
|
||||
proxy-addr,2.0.8,2.0.8,False,False
|
||||
proxy-agent-negotiate,1.1.0,1.1.0,False,False
|
||||
pump,3.0.4,3.0.4,False,False
|
||||
pvtsutils,1.3.6,1.3.6,False,False
|
||||
pvutils,1.2.0,1.2.0,False,False
|
||||
qr-code-styling,1.9.2,1.9.2,True,False
|
||||
qrcode-generator,1.5.2,2.0.4,False,True
|
||||
qs,6.16.0,6.16.0,False,False
|
||||
quick-format-unescaped,4.0.4,4.0.4,False,False
|
||||
radix-ui,1.6.7,1.6.7,True,False
|
||||
range-parser,1.3.0,1.3.0,False,False
|
||||
raw-body,3.0.2,4.0.0,False,True
|
||||
react,19.3.0,19.3.0,True,False
|
||||
react-day-picker,10.0.1,10.0.2,True,True
|
||||
react-dom,19.3.0,19.3.0,True,False
|
||||
react-is,19.3.0,19.3.0,False,False
|
||||
react-redux,9.3.0,9.3.0,False,False
|
||||
react-refresh,0.14.2,0.19.0,False,True
|
||||
react-remove-scroll,2.7.2,2.7.2,False,False
|
||||
react-remove-scroll-bar,2.3.8,2.3.8,False,False
|
||||
react-router,7.12.0,8.4.0,True,True
|
||||
react-style-singleton,2.2.3,2.2.3,False,False
|
||||
readdirp,4.1.2,5.1.1,False,True
|
||||
real-require,0.2.0;1.0.0,1.0.0,False,True
|
||||
recharts,3.10.1,3.10.1,True,False
|
||||
redux,5.0.1,5.0.1,False,False
|
||||
redux-thunk,3.1.0,3.1.0,False,False
|
||||
reflect-metadata,0.2.2,0.2.2,False,False
|
||||
require-from-string,2.0.2,2.0.2,False,False
|
||||
reselect,5.2.0,5.3.0,False,True
|
||||
retry,0.13.1,0.13.1,False,False
|
||||
rollup,4.63.5,4.63.5,False,False
|
||||
router,2.2.0,2.2.0,False,False
|
||||
safe-buffer,5.2.1,5.2.1,False,False
|
||||
safe-stable-stringify,2.5.0,2.5.0,False,False
|
||||
safer-buffer,2.1.2,2.1.2,False,False
|
||||
scheduler,0.28.0,0.28.0,False,False
|
||||
secure-json-parse,4.1.0,4.1.0,False,False
|
||||
semver,6.3.1;7.8.5,7.8.5,False,True
|
||||
send,1.2.1,1.2.1,False,False
|
||||
serve-static,2.2.1,2.2.1,False,False
|
||||
set-cookie-parser,2.7.2,3.1.2,False,True
|
||||
setprototypeof,1.2.0,1.2.0,False,False
|
||||
shebang-command,2.0.0,2.0.0,False,False
|
||||
shebang-regex,3.0.0,4.0.0,False,True
|
||||
side-channel,1.1.1,1.1.1,False,False
|
||||
side-channel-list,1.0.1,1.0.1,False,False
|
||||
side-channel-map,1.0.1,1.0.1,False,False
|
||||
side-channel-weakmap,1.0.2,1.0.2,False,False
|
||||
sonic-boom,4.2.1,5.0.1,False,True
|
||||
sonner,2.0.8,2.0.8,True,False
|
||||
source-map-js,1.2.1,1.2.2,False,True
|
||||
split2,4.2.0,4.2.0,False,False
|
||||
standardwebhooks,1.1.1,1.1.1,False,False
|
||||
statuses,2.0.2,2.0.2,False,False
|
||||
std-env,4.2.0,4.3.0,False,True
|
||||
strip-json-comments,5.0.3,5.0.3,False,False
|
||||
strnum,2.4.2,2.4.2,False,False
|
||||
tailwind-merge,3.7.0,3.7.0,True,False
|
||||
tailwindcss,4.3.3,4.3.3,True,False
|
||||
tapable,2.3.3,2.3.3,False,False
|
||||
thread-stream,4.2.0,4.2.0,False,False
|
||||
tiny-invariant,1.3.3,1.3.3,False,False
|
||||
tinybench,6.2.0,6.2.0,False,False
|
||||
tinyexec,1.3.1,1.3.1,False,False
|
||||
tinyglobby,0.2.17,0.2.17,False,False
|
||||
toidentifier,1.0.1,1.0.1,False,False
|
||||
ts-algebra,2.0.0,2.0.0,False,False
|
||||
tsconfck,3.1.6,3.1.6,False,False
|
||||
tslib,1.14.1;2.8.1,2.8.1,False,True
|
||||
tsyringe,4.10.0,4.10.0,False,False
|
||||
tw-animate-css,1.4.0,1.4.0,True,False
|
||||
type-is,2.1.0,3.0.0,False,True
|
||||
typebox,1.3.27,1.3.34,True,True
|
||||
typescript,7.0.2,7.0.2,True,False
|
||||
undici,7.30.0,8.11.2,False,True
|
||||
undici-types,7.24.6,8.11.2,False,True
|
||||
unpipe,1.0.0,1.0.0,False,False
|
||||
update-browserslist-db,1.3.3,1.3.3,False,False
|
||||
use-callback-ref,1.3.3,1.3.3,False,False
|
||||
use-sidecar,1.1.3,1.1.3,False,False
|
||||
use-sync-external-store,1.7.0,1.7.0,False,False
|
||||
valibot,1.5.0,1.5.0,False,False
|
||||
vary,1.1.2,1.1.2,False,False
|
||||
victory-vendor,37.3.6,37.3.6,False,False
|
||||
vite,7.3.6,8.3.1,True,True
|
||||
vite-node,3.2.4,6.0.0,False,True
|
||||
vite-tsconfig-paths,5.1.4,6.1.1,True,True
|
||||
vitest,5.0.2,5.0.3,True,True
|
||||
web-streams-polyfill,3.3.3,4.3.0,False,True
|
||||
whatwg-encoding,3.1.1,3.1.1,False,False
|
||||
whatwg-mimetype,4.0.0,5.0.0,False,True
|
||||
which,2.0.2,7.0.0,False,True
|
||||
why-is-node-running,3.2.2,3.2.2,False,False
|
||||
wrappy,1.0.2,1.0.2,False,False
|
||||
ws,8.21.3,8.22.0,False,True
|
||||
xml-naming,0.3.0,0.3.0,False,False
|
||||
xpath,0.0.34,0.0.34,True,False
|
||||
xtend,4.0.2,4.0.2,False,False
|
||||
yallist,3.1.1,5.0.0,False,True
|
||||
yaml,2.9.0;2.9.1,2.9.1,True,True
|
||||
zod,4.6.5,4.6.5,True,False
|
||||
zod-to-json-schema,3.25.2,3.25.2,False,False
|
||||
|
@@ -0,0 +1,63 @@
|
||||
{
|
||||
"removedContainers": [
|
||||
"umt-upgrade-app",
|
||||
"umt-upgrade-browser",
|
||||
"umt-upgrade-mock",
|
||||
"umt-upgrade-qb",
|
||||
"umt-upgrade-pg18"
|
||||
],
|
||||
"removedVolumes": [
|
||||
"umt_umt-pg-data",
|
||||
"umt-dev_umt-pg-data",
|
||||
"umt-upgrade-pg18-data",
|
||||
"umt-upgrade-app-data",
|
||||
"umt-upgrade-restore-data",
|
||||
"umt-upgrade-production-restore-data",
|
||||
"umt-upgrade-browser-profiles",
|
||||
"umt-upgrade-browser-config"
|
||||
],
|
||||
"removedImageTags": [
|
||||
"uhd-media-tool:upgrade-20261001",
|
||||
"uhd-media-tool:pre-upgrade-20261001",
|
||||
"umt-browser-desktop:1.17.0",
|
||||
"uhd-media-tool:v0.2.4",
|
||||
"uhd-media-tool:v0.2.3",
|
||||
"camofox-browser:1.17.0",
|
||||
"uhd-media-tool:v0.2.2",
|
||||
"uhd-media-tool:v0.2.1",
|
||||
"uhd-media-tool:v0.2.0",
|
||||
"uhd-media-tool:v0.2.0-rc",
|
||||
"uhd-media-tool:v0.1.0",
|
||||
"lscr.io/linuxserver/qbittorrent:5.1.2",
|
||||
"caddy:2-alpine",
|
||||
"alpine/socat:1.8.0.0"
|
||||
],
|
||||
"removedBuildImages": [],
|
||||
"preservedSharedImages": [
|
||||
"postgres:16-alpine"
|
||||
],
|
||||
"removedBackups": [
|
||||
"/data/backups/20260929T103808Z",
|
||||
"/data/backups/20261001T072253Z",
|
||||
".local/upgrade-20261001/rollback-docker-compose.yml",
|
||||
".local/upgrade-20261001/dev-pg16.dump",
|
||||
".local/upgrade-20261001/rollback-images.json",
|
||||
".local/upgrade-20261001/umt_umt-camofox.tar.gz",
|
||||
".local/upgrade-20261001/umt_umt-qb-config.tar.gz",
|
||||
".local/upgrade-20261001/production-app.env",
|
||||
".local/upgrade-20261001/rollback-development.sh",
|
||||
".local/upgrade-20261001/umt_umt-data.tar.gz",
|
||||
".local/upgrade-20261001/container-inventory-private.json",
|
||||
".local/upgrade-20261001/rollback-docker-compose.dev.yml",
|
||||
".local/upgrade-20261001/rollback-production.sh",
|
||||
".local/upgrade-20261001/current-container-inventory-private.json",
|
||||
".local/upgrade-20261001/umt_umt-caddy.tar.gz",
|
||||
".local/upgrade-20261001/4af29d25d939f585d86fb8382ec6f00e8d3b0fe14725e611ce9ae3c0875c0ecf.tar.gz",
|
||||
".local/upgrade-20261001/original-env.deploy",
|
||||
".local/upgrade-20261001/original-docker-compose.override.yml"
|
||||
],
|
||||
"retainedBackups": [
|
||||
"/data/backups/20261001T072536Z",
|
||||
".local/backups/dev-pg18-20261001.dump"
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,91 @@
|
||||
{
|
||||
"workspace": {
|
||||
"@biomejs/biome": "npm:@biomejs/[email protected]",
|
||||
"@earendil-works/pi-agent-core": "npm:@earendil-works/[email protected]",
|
||||
"@earendil-works/pi-ai": "npm:@earendil-works/[email protected]",
|
||||
"@hono/swagger-ui": "npm:@hono/[email protected]",
|
||||
"@hono/zod-openapi": "npm:@hono/[email protected]",
|
||||
"@modelcontextprotocol/sdk": "npm:@modelcontextprotocol/[email protected]",
|
||||
"@simplewebauthn/server": "npm:@simplewebauthn/[email protected]",
|
||||
"@types/node": "npm:@types/[email protected]",
|
||||
"@types/nunjucks": "npm:@types/[email protected]",
|
||||
"@types/pg": "npm:@types/[email protected]",
|
||||
"@xmldom/xmldom": "npm:@xmldom/[email protected]",
|
||||
"cheerio": "npm:[email protected]",
|
||||
"fast-xml-parser": "npm:[email protected]",
|
||||
"hash-wasm": "npm:[email protected]",
|
||||
"hono": "npm:[email protected]",
|
||||
"jpeg-js": "npm:[email protected]",
|
||||
"kysely": "npm:[email protected]",
|
||||
"nunjucks": "npm:[email protected]",
|
||||
"openworkflow": "npm:[email protected]",
|
||||
"pg": "npm:[email protected]",
|
||||
"pino": "npm:[email protected]",
|
||||
"pino-pretty": "npm:[email protected]",
|
||||
"playwright-core": "npm:[email protected]",
|
||||
"postgres": "npm:[email protected]",
|
||||
"typebox": "npm:[email protected]",
|
||||
"typescript": "npm:[email protected]",
|
||||
"vitest": "npm:[email protected]",
|
||||
"xpath": "npm:[email protected]",
|
||||
"yaml": "npm:[email protected]",
|
||||
"zod": "npm:[email protected]"
|
||||
},
|
||||
"web": {
|
||||
"dependencies": {
|
||||
"@fontsource-variable/inter-tight": "^5.3.0",
|
||||
"@fontsource-variable/space-grotesk": "^5.3.0",
|
||||
"@react-router/node": "8.4.0",
|
||||
"@simplewebauthn/browser": "^14.0.0",
|
||||
"@tanstack/react-query": "^5.104.0",
|
||||
"@umt/contracts": "workspace:*",
|
||||
"class-variance-authority": "^0.7.1",
|
||||
"clsx": "^2.1.1",
|
||||
"date-fns": "^4.4.0",
|
||||
"isbot": "^5.2.2",
|
||||
"lucide-react": "^1.49.0",
|
||||
"next-themes": "^0.4.6",
|
||||
"qr-code-styling": "^1.9.2",
|
||||
"radix-ui": "^1.6.7",
|
||||
"react": "^19.3.0",
|
||||
"react-day-picker": "^10.0.2",
|
||||
"react-dom": "^19.3.0",
|
||||
"react-router": "8.4.0",
|
||||
"recharts": "^3.10.1",
|
||||
"sonner": "^2.0.8",
|
||||
"tailwind-merge": "^3.7.0",
|
||||
"zod": "^4.6.5"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@react-router/dev": "8.4.0",
|
||||
"@tailwindcss/vite": "^4.3.3",
|
||||
"@types/react": "^19.3.0",
|
||||
"@types/react-dom": "^19.3.0",
|
||||
"tailwindcss": "^4.3.3",
|
||||
"tw-animate-css": "^1.4.0",
|
||||
"vite": "^8.3.1",
|
||||
"vite-tsconfig-paths": "^6.1.1"
|
||||
}
|
||||
},
|
||||
"browser": {
|
||||
"dependencies": {
|
||||
"better-sqlite3": "13.0.3",
|
||||
"camoufox-js": "0.12.0",
|
||||
"express": "5.2.1",
|
||||
"playwright-core": "1.60.0",
|
||||
"prom-client": "15.1.3",
|
||||
"swagger-jsdoc": "6.3.0"
|
||||
},
|
||||
"optionalDependencies": {
|
||||
"@modelcontextprotocol/sdk": "1.31.0"
|
||||
}
|
||||
},
|
||||
"sha256": {
|
||||
"deno.json": "1a136fefa2afecb8084dd41bbbfd415994ca4c073402c00e604452aca2bcd4a0",
|
||||
"deno.lock": "c18843d7db6039a22c97634b7e112b7dee2ae5acfac08a61cebd11c3f6d23e4c",
|
||||
"apps/web/package.json": "fe3ab24d9f77beee36e7872a261bd96261161cba84aa08dcf65e4a0136cf8e58",
|
||||
"docker/camofox/package.json": "911a051f515b68abc3301fa11caaa3b446b4af8895c76e4f0a1f8373541464b5",
|
||||
"docker/camofox/package-lock.json": "040b7a1c91b4536149b67a7291be70c089171752c639e8231b01b4ef4c695b46"
|
||||
},
|
||||
"policy": "Latest verified direct stable dependencies, preserving upstream transitive version constraints; Node type definitions target runtime24, browser Playwright1.60 is required by official Camoufox protocol."
|
||||
}
|
||||
@@ -0,0 +1,173 @@
|
||||
{
|
||||
"applicationVersion": "0.3.8",
|
||||
"hostUpgrade": false,
|
||||
"ci": {
|
||||
"exitCode": 0,
|
||||
"passed": 3264,
|
||||
"skipped": 4
|
||||
},
|
||||
"workspaceAudit": {
|
||||
"vulnerabilities": 0
|
||||
},
|
||||
"webSmoke": {
|
||||
"passed": 83,
|
||||
"skipped": 1,
|
||||
"reason": "no subscription detail data"
|
||||
},
|
||||
"piSessionCompatibility": {
|
||||
"oldJsonlOpened": 35,
|
||||
"passed": 35
|
||||
},
|
||||
"qbittorrentRealApi": {
|
||||
"target": "5.2.4",
|
||||
"passed": 3,
|
||||
"skipped": 1,
|
||||
"reason": "no API key configured"
|
||||
},
|
||||
"browserInstalledAudit": {
|
||||
"dependencyCount": 174,
|
||||
"vulnerabilities": 0
|
||||
},
|
||||
"backupRestoreE2E": {
|
||||
"server": "18.6",
|
||||
"client": "18.6",
|
||||
"mappingCountsMatch": true,
|
||||
"checksumsVerified": true
|
||||
},
|
||||
"developmentDatabaseMigration": {
|
||||
"source": "16.14",
|
||||
"target": "18.6",
|
||||
"tables": 88,
|
||||
"allCountsAndContentFingerprintsMatch": true,
|
||||
"newBackupRestore": "PG18 dump restored on isolated PG18; all 88 table fingerprints match"
|
||||
},
|
||||
"productionDatabaseMigration": {
|
||||
"source": "16.14",
|
||||
"target": "18.6",
|
||||
"tables": 89,
|
||||
"allCountsAndContentFingerprintsMatch": true,
|
||||
"finalStoppedWriteBackup": "20261001T072253Z",
|
||||
"deployedVersion": "0.3.8",
|
||||
"mode": "original readonly=false restored; deployment accepted",
|
||||
"oldPG16Volumes": "removed after acceptance with user authorization"
|
||||
},
|
||||
"oldCredentialsCompatibility": {
|
||||
"clonedDatabaseSecrets": "original key preserved",
|
||||
"downloaderConnection": "v5.1.2 existing deployment authenticated successfully"
|
||||
},
|
||||
"browserDesktopIsolated": {
|
||||
"sourceProfiles": "independent copy of existing production volume",
|
||||
"version": "1.18.0",
|
||||
"node": "24.21.0",
|
||||
"camoufox": "152.0.4-beta.30",
|
||||
"playwright": "1.60.0",
|
||||
"beforeAfterRestart": "passed",
|
||||
"checks": [
|
||||
"authorization",
|
||||
"fixed identity preserved",
|
||||
"new context and page",
|
||||
"evaluate",
|
||||
"snapshot",
|
||||
"PNG screenshot",
|
||||
"selector click",
|
||||
"trusted mouse click",
|
||||
"profile isolation",
|
||||
"persisted cookies after graceful restart"
|
||||
],
|
||||
"mcpInitialize": "passed SDK1.31.0"
|
||||
},
|
||||
"browserServiceRealVerification": {
|
||||
"version": "1.18.0",
|
||||
"phases": {
|
||||
"setup": {
|
||||
"passed": 2,
|
||||
"failed": 0,
|
||||
"items": [
|
||||
"provider:env 登记 + 探测",
|
||||
"auth:无 Bearer 被拒"
|
||||
]
|
||||
},
|
||||
"a": {
|
||||
"passed": 16,
|
||||
"failed": 0,
|
||||
"items": [
|
||||
"public:导航/快照/截图",
|
||||
"sessions:关闭公开页会话",
|
||||
"login:未登录识别为登录页",
|
||||
"screenshot:登录页",
|
||||
"takeover:接管期间自动化被拒",
|
||||
"takeover:坐标点击/焦点输入/回车",
|
||||
"redact:密码框值不出现在快照",
|
||||
"same-tab:交还后 Agent 读到人工操作结果(同一 tabId)",
|
||||
"login:登录后 Cookie 生效(Agent 直接打开受保护列表页)",
|
||||
"screenshot:列表页",
|
||||
"snapshot:列表页",
|
||||
"extract:列表",
|
||||
"extract:详情",
|
||||
"download:捕获 + sha256 一致 + 匹配本地资源",
|
||||
"download:已消费的下载不重复返回",
|
||||
"interact:后退/前进/刷新/滚动"
|
||||
]
|
||||
},
|
||||
"b": {
|
||||
"passed": 2,
|
||||
"failed": 0,
|
||||
"items": [
|
||||
"restart(SIGTERM):自动重连 + 旧标签页 lost + 旧引用不重放",
|
||||
"restart(SIGTERM):登录状态保持"
|
||||
]
|
||||
},
|
||||
"idle": {
|
||||
"passed": 2,
|
||||
"failed": 0,
|
||||
"items": [
|
||||
"idle(SESSION_TIMEOUT_MS):自动重连 + 旧标签页 lost + 旧引用不重放",
|
||||
"idle(SESSION_TIMEOUT_MS):登录状态保持"
|
||||
]
|
||||
},
|
||||
"c": {
|
||||
"passed": 1,
|
||||
"failed": 0,
|
||||
"items": [
|
||||
"agent-login:凭证注入登录(账号 2)"
|
||||
]
|
||||
},
|
||||
"d": {
|
||||
"passed": 2,
|
||||
"failed": 0,
|
||||
"items": [
|
||||
"restart(SIGKILL) 账号 2:自动重连 + 旧标签页 lost + 旧引用不重放",
|
||||
"restart(SIGKILL) 账号 2:未落盘登录丢失被明确识别"
|
||||
]
|
||||
}
|
||||
},
|
||||
"totalPassed": 25,
|
||||
"verifiedCapabilities": 10,
|
||||
"regressionTests": {
|
||||
"passed": 100,
|
||||
"files": 14
|
||||
},
|
||||
"sigkill": "new login since last save is lost and correctly detected; not claimed lossless"
|
||||
},
|
||||
"productionAcceptance": {
|
||||
"httpAndHttpsHealth": "0.3.8 DB ok",
|
||||
"mappingCountsMatch": true,
|
||||
"originalMasterKeyAndAllNonDatabaseMountsPreserved": true,
|
||||
"oldEncryptedDownloaderCredentials": "successful authentication to v5.2.4",
|
||||
"apiWorkerAndAgentRoles": "all alive as uid10001",
|
||||
"appErrorLevelMessages": 0,
|
||||
"latestPG18Backup": "20261001T072536Z",
|
||||
"latestBackupRestore": "passed on isolated PG18, checksums and mappings verified",
|
||||
"restoredTables": 89,
|
||||
"restoredAgentSessionFiles": 35,
|
||||
"allSessionFilesByteIdentical": true,
|
||||
"releaseWebSmoke": {
|
||||
"passed": 83,
|
||||
"skipped": 1
|
||||
},
|
||||
"cleanup": "completed; see upgrade-cleanup.json",
|
||||
"originalReadonlyStateRestored": true,
|
||||
"readonlyValue": false
|
||||
},
|
||||
"status": "completed"
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
╭ React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
|
||||
│ Severity: moderate
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=6.0.0 <7.18.0
|
||||
╰ Info: https://github.com/advisories/GHSA-wrjc-x8rr-h8h6
|
||||
|
||||
╭ React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
|
||||
│ Severity: moderate
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=6.4.0 <7.18.0
|
||||
╰ Info: https://github.com/advisories/GHSA-337j-9hxr-rhxg
|
||||
|
||||
╭ React Router vulnerable to Denial of Service via reflected user input in single-fetch
|
||||
│ Severity: high
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.0.0 <7.14.0
|
||||
╰ Info: https://github.com/advisories/GHSA-rxv8-25v2-qmq8
|
||||
|
||||
╭ React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
|
||||
│ Severity: moderate
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.0.0 <7.14.1
|
||||
╰ Info: https://github.com/advisories/GHSA-2j2x-hqr9-3h42
|
||||
|
||||
╭ React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
|
||||
│ Severity: high
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.0.0 <7.15.0
|
||||
╰ Info: https://github.com/advisories/GHSA-8x6r-g9mw-2r78
|
||||
|
||||
╭ React Router: Unauthenticated Denial of Service via Inefficient Route Matching
|
||||
│ Severity: high
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.0.0 <7.18.0
|
||||
╰ Info: https://github.com/advisories/GHSA-chx6-hx7r-mcp5
|
||||
|
||||
╭ React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE
|
||||
│ Severity: high
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.0.0 <=7.14.1
|
||||
╰ Info: https://github.com/advisories/GHSA-49rj-9fvp-4h2h
|
||||
|
||||
╭ React Router: RSCErrorHandler Missing Protocol Validation (XSS)
|
||||
│ Severity: moderate
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.11.0 <7.18.0
|
||||
╰ Info: https://github.com/advisories/GHSA-h8fp-f39c-q6mh
|
||||
|
||||
╭ React Router: Potential CSRF via PUT/PATCH/DELETE document requests
|
||||
│ Severity: low
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.12.0 <7.15.1
|
||||
╰ Info: https://github.com/advisories/GHSA-84g9-w2xq-vcv6
|
||||
|
||||
╭ React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
|
||||
│ Severity: high
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.12.0 <7.18.2
|
||||
╰ Info: https://github.com/advisories/GHSA-qwww-vcr4-c8h2
|
||||
|
||||
╭ React Router has stored XSS via unescaped Location header in prerendered redirect HTML
|
||||
│ Severity: moderate
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.5.1 <7.13.2
|
||||
╰ Info: https://github.com/advisories/GHSA-f22v-gfqf-p8f3
|
||||
|
||||
╭ React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets
|
||||
│ Severity: high
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.7.0 <7.13.2
|
||||
╰ Info: https://github.com/advisories/GHSA-8646-j5j9-6r62
|
||||
|
||||
╭ React Router: Open redirect leading to XSS
|
||||
│ Severity: moderate
|
||||
│ Package: react-router
|
||||
│ Vulnerable: >=7.9.6 <=7.12.0
|
||||
╰ Info: https://github.com/advisories/GHSA-jjmj-jmhj-qwj2
|
||||
|
||||
Found 13 vulnerabilities
|
||||
Severity: 1 low, 6 moderate, 6 high, 0 critical
|
||||
Reference in new issue
Block a user