Declared ranges — the lockfile is not published, so these are what consumers resolve against: core ws ^8.18.0 -> ^8.21.3 (prod, vuln 8.0.0-8.20.1) core, dapp, wallet, react vitest ^3.2.3 -> ^3.2.7 (dev, vuln <3.2.6) Transitive, lockfile only: vite 7.3.2 -> 7.3.6, postcss 8.5.12 -> 8.5.26, nanoid 3.3.11 -> 3.3.18, brace-expansion 5.0.5 -> 5.0.9. npm audit --audit-level=moderate now exits 0. esbuild's low-severity Windows dev-server advisory is left: needs a major bump behind a peer range. |
||
|---|---|---|
| .. | ||
| src | ||
| package.json | ||
| tsconfig.json | ||
| vitest.config.ts | ||