- Add pnpm override to replace vulnerable @discordjs/opus with opusscript - Eliminates CVE-2024-21521 Denial of Service vulnerability (CVSS 8.7) - Maintains API compatibility while using secure implementation - Security audit now shows: No known vulnerabilities found 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
41 lines
1.1 KiB
JSON
41 lines
1.1 KiB
JSON
{
|
|
"name": "ghbot",
|
|
"version": "2.0.0",
|
|
"description": "",
|
|
"main": "src/index.js",
|
|
"dependencies": {
|
|
"@discordjs/opus": "^0.9.0",
|
|
"@discordjs/voice": "^0.18.0",
|
|
"axios": "^1.11.0",
|
|
"better-sqlite3": "^11.10.0",
|
|
"discord.js": "^14.21.0",
|
|
"ffmpeg-static": "^5.2.0",
|
|
"node-schedule": "^2.1.1",
|
|
"opusscript": "^0.1.1",
|
|
"sodium-native": "^4.3.3"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^22.17.2",
|
|
"nodemon": "^3.1.10"
|
|
},
|
|
"pnpm": {
|
|
"overrides": {
|
|
"@discordjs/opus": "npm:opusscript@^0.1.1"
|
|
}
|
|
},
|
|
"scripts": {
|
|
"dev": "nodemon src/index.js",
|
|
"start": "docker compose up -d",
|
|
"start:logs": "pnpm start && pnpm logs",
|
|
"stop": "docker compose down",
|
|
"build": "docker compose build",
|
|
"restart": "docker compose restart",
|
|
"logs": "docker compose logs -f",
|
|
"boom": "pnpm stop && pnpm build && pnpm start",
|
|
"image:build": "docker build -t ghbot:${VERSION:-latest} .",
|
|
"image:run": "docker run -d --name ghbot --restart always ghbot:${VERSION:-latest}"
|
|
},
|
|
"author": "https://github.com/greenham",
|
|
"license": "MIT"
|
|
}
|