mirror of
https://github.com/franalgaba/grimoire.git
synced 2026-09-14 20:26:31 +08:00
Fran Algaba
fa20ce9e63
* Mitigate axios supply-chain compromise (CVE-2026-03-31) Pin axios to 1.13.5 via overrides to prevent resolution of compromised 1.14.1/0.30.4 versions. Add bunfig.toml with minimumReleaseAge=604800 (7 days) and .npmrc min-release-age=7 as defense-in-depth against future supply-chain attacks. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Add changeset for axios supply-chain mitigation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
40 lines
1.2 KiB
JSON
40 lines
1.2 KiB
JSON
{
|
|
"name": "grimoire",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"description": "A Portable Execution Language for Onchain Strategies",
|
|
"type": "module",
|
|
"workspaces": [
|
|
"packages/*"
|
|
],
|
|
"scripts": {
|
|
"build": "bun run --filter @grimoirelabs/core build && bun run --filter @grimoirelabs/venues build && bun run --filter @grimoirelabs/cli build",
|
|
"changeset": "changeset",
|
|
"version": "changeset version && bunx biome format --write .",
|
|
"release": "bun run build && NPM_CONFIG_PROVENANCE=true NPM_CONFIG_ACCESS=public changeset publish",
|
|
"test": "bun test",
|
|
"test:watch": "bun test --watch",
|
|
"test:coverage": "bun test --coverage",
|
|
"lint": "biome check .",
|
|
"lint:fix": "biome check --write .",
|
|
"format": "biome format --write .",
|
|
"typecheck": "tsc --noEmit",
|
|
"prepare": "lefthook install",
|
|
"validate": "bun run lint && bun run typecheck && bun test"
|
|
},
|
|
"devDependencies": {
|
|
"@biomejs/biome": "^2.4.4",
|
|
"@changesets/cli": "^2.29.8",
|
|
"@types/bun": "^1.3.9",
|
|
"lefthook": "^2.1.1",
|
|
"skills-ref": "^0.1.5",
|
|
"typescript": "^5.9.3"
|
|
},
|
|
"overrides": {
|
|
"undici": "^6.23.0",
|
|
"tmp": "^0.2.4",
|
|
"cookie": "^0.7.0",
|
|
"axios": "1.13.5"
|
|
}
|
|
}
|