c87a16a683
@discordjs/voice → prism-media → @discordjs/opus → @discordjs/node-pre-gyp pins tar ^6.1.11. All tar <=7.5.10 are vulnerable (GHSA-34x7-hfp2-rc4v, 8qq5-rm4j-mr97, 83g3-92jg-28cx, qffp-2rhf-9h96, 9ppj-qmqm-q256, r6q2-hw4h-h46w) with no fix available on the v6 line. Use npm `overrides` to force tar ^7.5.15 across the dep tree. Verified: - npm install: `found 0 vulnerabilities` - docker build --no-cache: succeeds; @discordjs/opus prebuilt is still extracted correctly by node-pre-gyp with tar v7 - npm run build: clean
49 lines
1.3 KiB
JSON
49 lines
1.3 KiB
JSON
{
|
|
"name": "tts_bot",
|
|
"version": "0.0.1",
|
|
"description": "discord bot with typescript",
|
|
"homepage": "https://git.tkrmagid.kr/tkrmagid/tts_bot",
|
|
"bugs": {
|
|
"url": "https://git.tkrmagid.kr/tkrmagid/tts_bot/issues"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://git.tkrmagid.kr/tkrmagid/tts_bot.git"
|
|
},
|
|
"license": "ISC",
|
|
"author": "tkrmagid",
|
|
"type": "commonjs",
|
|
"main": "dist/index.js",
|
|
"scripts": {
|
|
"build": "node -e \"require('fs').mkdirSync('dist',{recursive:true})\" && ts-cleaner && tsc",
|
|
"start": "node .",
|
|
"dev": "ts-node src/index.ts",
|
|
"prod": "ts-node src/utils/Prod-commands.ts",
|
|
"test": "ts-node src/test.ts"
|
|
},
|
|
"devDependencies": {
|
|
"@types/better-sqlite3": "^7.6.13",
|
|
"@types/fluent-ffmpeg": "^2.1.28",
|
|
"@types/node": "^24.9.1",
|
|
"@types/ws": "^8.18.1",
|
|
"ffmpeg-static": "^5.2.0",
|
|
"ts-cleaner": "^1.0.5",
|
|
"ts-node": "^10.9.2"
|
|
},
|
|
"dependencies": {
|
|
"@discordjs/opus": "^0.10.0",
|
|
"@discordjs/voice": "^0.19.0",
|
|
"@snazzah/davey": "^0.1.7",
|
|
"axios": "^1.13.0",
|
|
"better-sqlite3": "^12.4.1",
|
|
"colors": "^1.4.0",
|
|
"discord.js": "^14.24.0",
|
|
"dotenv": "^17.2.3",
|
|
"fluent-ffmpeg": "^2.1.3",
|
|
"ws": "^8.18.3"
|
|
},
|
|
"overrides": {
|
|
"tar": "^7.5.15"
|
|
}
|
|
}
|