Fix security vulnerability with pnpm override

- Add pnpm override to replace vulnerable @discordjs/opus with opusscript
- Eliminates CVE-2024-21521 Denial of Service vulnerability (CVSS 8.7)
- Maintains API compatibility while using secure implementation
- Security audit now shows: No known vulnerabilities found

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Chris Ham
2025-08-16 14:26:49 -07:00
parent fd68a02503
commit 80b21e5073
2 changed files with 20 additions and 289 deletions

View File

@@ -18,6 +18,11 @@
"@types/node": "^22.17.2",
"nodemon": "^3.1.10"
},
"pnpm": {
"overrides": {
"@discordjs/opus": "npm:opusscript@^0.1.1"
}
},
"scripts": {
"dev": "nodemon src/index.js",
"start": "docker compose up -d",