Clears all 15 npm audit findings (8 high / 6 moderate / 1 low): - @modelcontextprotocol/sdk 1.25.2 → 1.29.0 (GHSA-345p-7cg4-v4c7 cross-client data leak via shared transport reuse). Root had it pinned exact in devDependencies which blocked audit fix. - systeminformation 5.30.6 → 5.31.5 (GHSA-5vv4-hvf7-2h46, GHSA-9c88-49p5-5ggf command injection) - hono, undici, rollup, picomatch, minimatch, lodash-es, svelte, devalue, ajv, brace-expansion, markdown-it, yaml, qs — lockfile bumps via npm audit fix
34 lines
1 KiB
JSON
34 lines
1 KiB
JSON
{
|
|
"name": "@modelcontextprotocol/quickstart",
|
|
"version": "1.3.2",
|
|
"type": "module",
|
|
"private": true,
|
|
"description": "Quickstart MCP App Server example",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/modelcontextprotocol/ext-apps",
|
|
"directory": "examples/quickstart"
|
|
},
|
|
"license": "MIT",
|
|
"scripts": {
|
|
"build": "tsc --noEmit && tsc -p tsconfig.server.json && cross-env INPUT=mcp-app.html vite build",
|
|
"start": "concurrently --raw \"cross-env NODE_ENV=development INPUT=mcp-app.html vite build --watch\" \"tsx watch main.ts\""
|
|
},
|
|
"dependencies": {
|
|
"@modelcontextprotocol/ext-apps": "^1.0.0",
|
|
"@modelcontextprotocol/sdk": "^1.29.0",
|
|
"cors": "^2.8.5",
|
|
"express": "^5.1.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/cors": "^2.8.19",
|
|
"@types/express": "^5.0.0",
|
|
"@types/node": "22.19.5",
|
|
"concurrently": "^9.2.1",
|
|
"cross-env": "^10.1.0",
|
|
"tsx": "^4.21.0",
|
|
"typescript": "^5.9.3",
|
|
"vite": "^6.0.0",
|
|
"vite-plugin-singlefile": "^2.3.0"
|
|
}
|
|
}
|