Clears all 15 npm audit findings (8 high / 6 moderate / 1 low): - @modelcontextprotocol/sdk 1.25.2 → 1.29.0 (GHSA-345p-7cg4-v4c7 cross-client data leak via shared transport reuse). Root had it pinned exact in devDependencies which blocked audit fix. - systeminformation 5.30.6 → 5.31.5 (GHSA-5vv4-hvf7-2h46, GHSA-9c88-49p5-5ggf command injection) - hono, undici, rollup, picomatch, minimatch, lodash-es, svelte, devalue, ajv, brace-expansion, markdown-it, yaml, qs — lockfile bumps via npm audit fix
35 lines
1.3 KiB
JSON
35 lines
1.3 KiB
JSON
{
|
|
"homepage": "https://github.com/modelcontextprotocol/ext-apps/tree/main/examples/basic-host",
|
|
"name": "@modelcontextprotocol/ext-apps-basic-host",
|
|
"version": "1.3.2",
|
|
"type": "module",
|
|
"scripts": {
|
|
"build": "tsc --noEmit && concurrently \"cross-env INPUT=index.html vite build\" \"cross-env INPUT=sandbox.html vite build\"",
|
|
"watch": "concurrently \"cross-env INPUT=index.html vite build --watch\" \"cross-env INPUT=sandbox.html vite build --watch\"",
|
|
"serve": "bun --watch serve.ts",
|
|
"start": "cross-env NODE_ENV=development npm run build && npm run serve",
|
|
"dev": "cross-env NODE_ENV=development concurrently \"npm run watch\" \"npm run serve\""
|
|
},
|
|
"dependencies": {
|
|
"@modelcontextprotocol/ext-apps": "^1.0.0",
|
|
"@modelcontextprotocol/sdk": "^1.29.0",
|
|
"react": "^19.2.0",
|
|
"react-dom": "^19.2.0",
|
|
"zod": "^4.1.13"
|
|
},
|
|
"devDependencies": {
|
|
"@types/express": "^5.0.0",
|
|
"@types/node": "22.10.0",
|
|
"@types/react": "^19.2.2",
|
|
"@types/react-dom": "^19.2.2",
|
|
"@vitejs/plugin-react": "^4.3.4",
|
|
"concurrently": "^9.2.1",
|
|
"cors": "^2.8.5",
|
|
"express": "^5.1.0",
|
|
"prettier": "^3.6.2",
|
|
"typescript": "^5.9.3",
|
|
"vite": "^6.0.0",
|
|
"vite-plugin-singlefile": "^2.3.0",
|
|
"vitest": "^3.2.4"
|
|
}
|
|
}
|