mirror of
https://github.com/vercel/flags.git
synced 2026-09-19 03:49:23 +08:00
Dominik Ferber
2532e99ea8
Bumps the vulnerable transitive dependencies flagged by Dependabot via pnpm overrides, and the direct nanoid dependency in the examples. - nanoid >= 4 -> ^5.1.16 (GHSA infinite loop on negative/zero size) - brace-expansion >= 4 -> ^5.0.9 (DoS via unbounded intermediate arrays) - dompurify -> ^3.4.13 (XSS via detached subtree after IN_PLACE hook removal) - fast-uri -> ^3.1.5 (host confusion via backslash authority introducer) - js-yaml 3 -> ^3.15.1, js-yaml 4 -> ^4.3.1 (quadratic CPU in !!omap) - mermaid -> ^11.16.1 (DoS, prototype pollution, CSS injection) - postcss -> ^8.5.23 (arbitrary .map file read via sourceMappingURL) - @sveltejs/kit -> ^2.70.2 (ReDoS in Accept header content negotiation) image-size (alerts #979, #980) has no patched release yet, so it is left as-is. It is only used at build time by the docs site. Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
This is a Next.js project bootstrapped with create-next-app.
Getting Started
First, run the development server:
npm run dev
# or
yarn dev
# or
pnpm dev
# or
bun dev
Open http://localhost:3000 with your browser to see the result.
You can start editing the page by modifying app/page.tsx. The page auto-updates as you edit the file.
This project uses next/font to automatically optimize and load Geist, a new font family for Vercel.
Learn More
To learn more about Next.js, take a look at the following resources:
- Next.js Documentation - learn about Next.js features and API.
- Learn Next.js - an interactive Next.js tutorial.
You can check out the Next.js GitHub repository - your feedback and contributions are welcome!
Deploy on Vercel
The easiest way to deploy your Next.js app is to use the Vercel Platform from the creators of Next.js.
Check out our Next.js deployment documentation for more details.