Skip to content

Commit 6f2d921

Browse files
committed
sec(frontend): pin npm deps to exact lockfile versions (closes #425)
Replace all 29 caret ranges (^) in package.json with the exact versions already recorded in package-lock.json. Exact pins eliminate the window where `npm install` (vs `npm ci`) resolves a newer minor/patch that may carry unaudited CVEs, and make supply-chain review straightforward. No functional change: every pinned version is the version currently installed, so the lockfile is unchanged.
1 parent 60526ce commit 6f2d921

1 file changed

Lines changed: 29 additions & 29 deletions

File tree

frontend/package.json

Lines changed: 29 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -14,37 +14,37 @@
1414
"clean": "rm -rf dist"
1515
},
1616
"devDependencies": {
17-
"@babel/core": "^7.23.0",
18-
"@babel/preset-env": "^7.23.0",
19-
"@babel/preset-typescript": "^7.23.0",
20-
"@testing-library/dom": "^9.3.0",
21-
"@testing-library/jest-dom": "^6.1.0",
22-
"@types/chart.js": "^2.9.41",
23-
"@types/jest": "^29.5.0",
24-
"@types/jsdom": "^21.1.0",
25-
"@typescript-eslint/eslint-plugin": "^8.0.0",
26-
"@typescript-eslint/parser": "^8.0.0",
27-
"babel-loader": "^9.1.0",
28-
"copy-webpack-plugin": "^14.0.0",
29-
"css-loader": "^6.8.0",
30-
"css-minimizer-webpack-plugin": "^8.0.0",
31-
"eslint": "^8.50.0",
32-
"html-webpack-plugin": "^5.5.0",
33-
"jest": "^29.7.0",
34-
"jest-environment-jsdom": "^29.7.0",
35-
"jsdom": "^22.1.0",
36-
"mini-css-extract-plugin": "^2.7.0",
37-
"style-loader": "^3.3.0",
38-
"ts-jest": "^29.1.0",
39-
"ts-loader": "^9.5.0",
40-
"typescript": "^5.3.0",
41-
"webpack": "^5.88.0",
42-
"webpack-cli": "^5.1.0"
17+
"@babel/core": "7.29.7",
18+
"@babel/preset-env": "7.28.5",
19+
"@babel/preset-typescript": "7.28.5",
20+
"@testing-library/dom": "9.3.4",
21+
"@testing-library/jest-dom": "6.9.1",
22+
"@types/chart.js": "2.9.41",
23+
"@types/jest": "29.5.14",
24+
"@types/jsdom": "21.1.7",
25+
"@typescript-eslint/eslint-plugin": "8.62.1",
26+
"@typescript-eslint/parser": "8.62.1",
27+
"babel-loader": "9.2.1",
28+
"copy-webpack-plugin": "14.0.0",
29+
"css-loader": "6.11.0",
30+
"css-minimizer-webpack-plugin": "8.0.0",
31+
"eslint": "8.57.1",
32+
"html-webpack-plugin": "5.6.5",
33+
"jest": "29.7.0",
34+
"jest-environment-jsdom": "29.7.0",
35+
"jsdom": "22.1.0",
36+
"mini-css-extract-plugin": "2.9.4",
37+
"style-loader": "3.3.4",
38+
"ts-jest": "29.4.6",
39+
"ts-loader": "9.5.4",
40+
"typescript": "5.9.3",
41+
"webpack": "5.108.3",
42+
"webpack-cli": "5.1.4"
4343
},
4444
"dependencies": {
45-
"@types/qrcode": "^1.5.6",
46-
"chart.js": "^4.4.0",
47-
"qrcode": "^1.5.4"
45+
"@types/qrcode": "1.5.6",
46+
"chart.js": "4.5.1",
47+
"qrcode": "1.5.4"
4848
},
4949
"jest": {
5050
"preset": "ts-jest",

0 commit comments

Comments
 (0)