fix(security): resolve critical vulnerability in form-data dependency
- Add npm overrides to force form-data version 4.0.4 or higher - Fixes GitHub security advisory GHSA-fjxv-7rqg-78g4 - Vulnerability was in transitive dependency via TensorFlow.js - No functionality changes, all tests passing
This commit is contained in:
parent
24b0df8df5
commit
0798de52e6
2 changed files with 6 additions and 3 deletions
|
|
@ -48,6 +48,9 @@
|
|||
"engines": {
|
||||
"node": ">=24.4.0"
|
||||
},
|
||||
"overrides": {
|
||||
"form-data": "^4.0.4"
|
||||
},
|
||||
"scripts": {
|
||||
"prebuild": "echo 'Prebuild step - no version generation needed'",
|
||||
"build": "BUILD_TYPE=unified rollup -c rollup.config.js",
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue