compendiq-ce/package.json at dev · Compendiq/compendiq-ce · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
{
  "name": "compendiq",
  "version": "0.9.1",
  "private": true,
  "description": "Compendiq - AI-powered knowledge base management with Confluence integration and Ollama LLM backend",
  "workspaces": [
    "backend",
    "frontend",
    "packages/contracts"
  ],
  "scripts": {
    "dev": "concurrently \"npm run dev -w backend\" \"npm run dev -w frontend\"",
    "build": "npm run build -w @compendiq/contracts && npm run build -w backend && npm run build -w frontend",
    "lint": "npm run lint -w backend && npm run lint -w frontend",
    "typecheck": "npm run build -w @compendiq/contracts && npm run typecheck -w backend && npm run typecheck -w frontend",
    "test": "npm run build -w @compendiq/contracts && npm run test -w @compendiq/contracts && npm run test -w backend && npm run test -w frontend && vitest run --config e2e/vitest.config.ts",
    "test:e2e": "npx playwright test",
    "lighthouse": "lhci autorun",
    "knip": "knip",
    "prepare": "husky || true"
  },
  "//deps-note": "These mirror backend prod deps (kept in sync with backend/package.json) so npm hoists them to the root node_modules. Without this, conflicting versions from root devDep chains push backend's copy down to backend/node_modules, where the runtime Docker stage — which copies only the root tree and flattens backend/dist to /app/dist — can't reach them. The OpenTelemetry runtime stack lives here for exactly that reason (#1117: the whole observability path silently no-ops in the shipped image when these nest). The smoke step in .github/workflows/docker-build.yml guards against this regressing silently.",
  "dependencies": {
    "@opentelemetry/api": "^1.9.1",
    "@opentelemetry/auto-instrumentations-node": "^0.79.0",
    "@opentelemetry/sdk-metrics": "2.10.0",
    "@opentelemetry/sdk-node": "^0.221.0",
    "pdf-lib": "^1.17.1"
  },
  "devDependencies": {
    "@lhci/cli": "^0.15.1",
    "@playwright/test": "^1.58.2",
    "concurrently": "^9.1.0",
    "husky": "^9.1.7",
    "knip": "^6.3.0",
    "vitest": "^5.0.0"
  },
  "//tooling-deps-note": "lighthouse 12.6.1 pulls puppeteer-core 24 → @puppeteer/browsers 2.13.2 → extract-zip 2.0.1 (GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv, no patched extract-zip). Browsers 3.2.2 dropped that extractor. @tailwindcss/typography (≤0.5.20) pins postcss-selector-parser 6.0.10 exactly (GHSA-rj75-hqrm-r3gf, fixed only in 7.1.6); mermaid (≤12.1.0) wants katex ^0.16 (GHSA-238p-pmpm-9mq7, fixed in 0.18.2). Drop those two overrides once the parents widen their ranges.",
  "overrides": {
    "@puppeteer/browsers": "3.2.2",
    "vite": "^8.0.16",
    "@tiptap/core": "3.30.5",
    "@tiptap/pm": "3.30.5",
    "@tiptap/starter-kit": "3.30.5",
    "@tiptap/extensions": "3.30.5",
    "@tiptap/react": "3.30.5",
    "@tiptap/extension-bubble-menu": "3.30.5",
    "@tiptap/extension-floating-menu": "3.30.5",
    "protobufjs": "^7.5.5",
    "@fastify/static": "^9.1.1",
    "fast-uri": "^3.1.7",
    "qs@6": "^6.16.0",
    "@xmldom/xmldom@0.8": "^0.8.15",
    "hono": "^4.12.18",
    "ip-address": "^10.1.1",
    "js-yaml@3": "^3.15.1",
    "js-yaml@4": "^4.3.1",
    "shell-quote": "^1.11.0",
    "tmp": "^0.2.6",
    "uuid": "^14.0.0",
    "brace-expansion@5": "^5.0.6",
    "postcss-selector-parser": "^7.1.6",
    "katex": "^0.18.2"
  },
  "engines": {
    "node": ">=22.13.0"
  }
}