mirror of
https://github.com/tiennm99/bsk.git
synced 2026-08-04 20:27:24 +00:00
Defense-in-depth check that fails the build (and the local pre-push workflow) if a server secret value is assigned to a NEXT_PUBLIC_* variable — those get bundled into the browser by Next.js. - scripts/check-no-secret-leak.mjs: git grep for the assignment shape, excluding lockfiles and the script itself - package.json: pnpm check:no-secret-leak - .github/workflows/ci.yml: run the guard right after install, before format/lint/typecheck/build - docs/threat-model.md: close the last Unresolved item
58 lines
1.6 KiB
JSON
58 lines
1.6 KiB
JSON
{
|
|
"name": "bsk",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"packageManager": "pnpm@11.1.1",
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "eslint .",
|
|
"typecheck": "tsc --noEmit",
|
|
"format": "prettier --write .",
|
|
"format:check": "prettier --check .",
|
|
"db:preflight": "tsx scripts/preflight-supabase.ts",
|
|
"db:push": "pnpm db:preflight && supabase db push",
|
|
"check:no-secret-leak": "node scripts/check-no-secret-leak.mjs"
|
|
},
|
|
"dependencies": {
|
|
"@hookform/resolvers": "^5.4.0",
|
|
"@react-pdf/renderer": "^4.5.1",
|
|
"@supabase/ssr": "^0.10.3",
|
|
"@supabase/supabase-js": "^2.106.1",
|
|
"@tanstack/react-table": "^8.21.3",
|
|
"@upstash/qstash": "^2.11.0",
|
|
"@upstash/ratelimit": "^2.0.8",
|
|
"@upstash/redis": "^1.38.0",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"date-fns": "^4.3.0",
|
|
"date-fns-tz": "^3.2.0",
|
|
"lucide-react": "^0.546.0",
|
|
"next": "^16.2.6",
|
|
"next-intl": "^4.12.0",
|
|
"react": "^19.2.6",
|
|
"react-dom": "^19.2.6",
|
|
"react-hook-form": "^7.76.1",
|
|
"sonner": "^2.0.7",
|
|
"tailwind-merge": "^3.6.0",
|
|
"zod": "^4.4.3"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/eslintrc": "^3.3.5",
|
|
"@tailwindcss/postcss": "^4.3.0",
|
|
"@types/node": "^22.10.0",
|
|
"@types/react": "^19.2.15",
|
|
"@types/react-dom": "^19.2.3",
|
|
"eslint": "^9.36.0",
|
|
"eslint-config-next": "^16.2.6",
|
|
"eslint-config-prettier": "^10.1.8",
|
|
"postcss": "^8.5.15",
|
|
"prettier": "^3.8.3",
|
|
"prettier-plugin-tailwindcss": "^0.8.0",
|
|
"tailwindcss": "^4.3.0",
|
|
"tsx": "^4.22.3",
|
|
"typescript": "^5.9.2"
|
|
}
|
|
}
|