fix(security): resolve critical vulnerability in form-data dependency

- Add npm overrides to force form-data version 4.0.4 or higher
- Fixes GitHub security advisory GHSA-fjxv-7rqg-78g4
- Vulnerability was in transitive dependency via TensorFlow.js
- No functionality changes, all tests passing
This commit is contained in:
David Snelling 2025-08-05 07:28:10 -07:00
parent 6531d4cf38
commit 609370c4fc
2 changed files with 6 additions and 3 deletions

View file

@ -48,6 +48,9 @@
"engines": {
"node": ">=24.4.0"
},
"overrides": {
"form-data": "^4.0.4"
},
"scripts": {
"prebuild": "echo 'Prebuild step - no version generation needed'",
"build": "BUILD_TYPE=unified rollup -c rollup.config.js",