- Replace xlsx package (v0.18.5) with exceljs (v4.4.0) - Remove @types/xlsx dependency (exceljs has built-in TypeScript types) - Update biaMatchingService.ts to use ExcelJS API: - Replace XLSX.read() with workbook.xlsx.load() - Replace XLSX.utils.sheet_to_json() with eachRow() iteration - Handle 1-based column indexing correctly - Make loadBIAData() and findBIAMatch() async functions - Update all callers in applications.ts and claude.ts to use await - Fix npm audit: 0 vulnerabilities (was 1 high severity) This migration eliminates the Prototype Pollution and ReDoS vulnerabilities in the xlsx package while maintaining full functionality.
45 lines
1.2 KiB
JSON
45 lines
1.2 KiB
JSON
{
|
|
"name": "cmdb-insight-backend",
|
|
"version": "1.0.0",
|
|
"description": "CMDB Insight Backend",
|
|
"type": "module",
|
|
"main": "dist/index.js",
|
|
"scripts": {
|
|
"dev": "tsx watch src/index.ts",
|
|
"build": "tsc",
|
|
"start": "node dist/index.js",
|
|
"generate-schema": "tsx scripts/generate-schema.ts",
|
|
"migrate": "tsx scripts/run-migrations.ts",
|
|
"check-admin": "tsx scripts/check-admin-user.ts",
|
|
"migrate:sqlite-to-postgres": "tsx scripts/migrate-sqlite-to-postgres.ts"
|
|
},
|
|
"dependencies": {
|
|
"@anthropic-ai/sdk": "^0.32.1",
|
|
"@types/bcrypt": "^6.0.0",
|
|
"@types/nodemailer": "^7.0.5",
|
|
"bcrypt": "^6.0.0",
|
|
"better-sqlite3": "^11.6.0",
|
|
"cookie-parser": "^1.4.7",
|
|
"cors": "^2.8.5",
|
|
"dotenv": "^16.4.5",
|
|
"express": "^4.21.1",
|
|
"express-rate-limit": "^7.4.1",
|
|
"helmet": "^8.0.0",
|
|
"nodemailer": "^7.0.12",
|
|
"openai": "^6.15.0",
|
|
"pg": "^8.13.1",
|
|
"winston": "^3.17.0",
|
|
"exceljs": "^4.4.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/better-sqlite3": "^7.6.12",
|
|
"@types/cookie-parser": "^1.4.10",
|
|
"@types/cors": "^2.8.17",
|
|
"@types/express": "^5.0.0",
|
|
"@types/node": "^22.9.0",
|
|
"@types/pg": "^8.11.10",
|
|
"tsx": "^4.19.2",
|
|
"typescript": "^5.6.3"
|
|
}
|
|
}
|