38a58871ac
Implements AUDIT_REPORT.md M-2 and M-5: - M-2: CSP (script-src 'self'; frame-ancestors 'none'; object-src 'none'; ...), nosniff, X-Frame-Options DENY, Referrer-Policy on the SPA nginx, plus gzip for the bundle. The inline theme bootstrap moved to /theme-init.js so script-src 'self' holds with no inline scripts. - M-5: vite 5 -> 8 (+ plugin-react 6) — clears the dev-only esbuild advisories; npm audit now reports 0 vulnerabilities including dev deps. Build verified. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
45 lines
1.2 KiB
JSON
45 lines
1.2 KiB
JSON
{
|
|
"name": "inboxintel-frontend",
|
|
"private": true,
|
|
"version": "0.1.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "vite build",
|
|
"preview": "vite preview --host"
|
|
},
|
|
"dependencies": {
|
|
"@fontsource-variable/inter": "^5.2.8",
|
|
"@radix-ui/react-avatar": "^1.2.1",
|
|
"@radix-ui/react-checkbox": "^1.3.6",
|
|
"@radix-ui/react-dialog": "^1.1.18",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.19",
|
|
"@radix-ui/react-label": "^2.1.11",
|
|
"@radix-ui/react-popover": "^1.1.18",
|
|
"@radix-ui/react-scroll-area": "^1.2.13",
|
|
"@radix-ui/react-separator": "^1.1.11",
|
|
"@radix-ui/react-switch": "^1.3.2",
|
|
"@radix-ui/react-tabs": "^1.1.16",
|
|
"@radix-ui/react-toast": "^1.2.18",
|
|
"@radix-ui/react-tooltip": "^1.2.11",
|
|
"axios": "^1.7.2",
|
|
"chart.js": "^4.4.3",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"lucide-react": "^1.22.0",
|
|
"react": "^18.3.1",
|
|
"react-chartjs-2": "^5.2.0",
|
|
"react-dom": "^18.3.1",
|
|
"react-grid-layout": "^1.4.4",
|
|
"react-router-dom": "^6.24.0",
|
|
"tailwind-merge": "^3.6.0"
|
|
},
|
|
"devDependencies": {
|
|
"@vitejs/plugin-react": "^6.0.3",
|
|
"autoprefixer": "^10.5.2",
|
|
"postcss": "^8.5.16",
|
|
"tailwindcss": "^3.4.19",
|
|
"vite": "^8.1.2"
|
|
}
|
|
}
|