8f0c98caceThe root `overrides` block pinned js-yaml to versions inside the advisory range (3.15.0 and 4.2.0), so `npm audit fix` reported a fix as available and then changed nothing — overrides take precedence. Bumps both pins to the patched `v3-legacy` / `v4-legacy` releases, addressing GHSA-52cp-r559-cp3m and GHSA-5p4m-2wfm-xmqj. Exposure is development-only: `npm ls js-yaml --omit=dev` is empty and both copies are reachable only via eslint and ts-jest/istanbul, neither of which ships in the published package. Both patched versions have an identical dependency and bin shape, so the lock entries were patched in place — 6 lines, no transitive churn. Fixes #2072 Claude-Session: https://claude.ai/code/session_01Gq5jMmxRUphrVbfNbYVmQH Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
100 lines
3.5 KiB
JSON
100 lines
3.5 KiB
JSON
{
|
|
"name": "@modelcontextprotocol/inspector",
|
|
"version": "1.0.1",
|
|
"description": "Model Context Protocol inspector",
|
|
"license": "SEE LICENSE IN LICENSE",
|
|
"author": "Model Context Protocol a Series of LF Projects, LLC.",
|
|
"homepage": "https://modelcontextprotocol.io",
|
|
"bugs": "https://github.com/modelcontextprotocol/inspector/issues",
|
|
"type": "module",
|
|
"bin": {
|
|
"mcp-inspector": "cli/build/cli.js"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/modelcontextprotocol/inspector"
|
|
},
|
|
"files": [
|
|
"client/bin",
|
|
"client/dist",
|
|
"server/build",
|
|
"server/static",
|
|
"cli/build"
|
|
],
|
|
"workspaces": [
|
|
"client",
|
|
"server",
|
|
"cli"
|
|
],
|
|
"scripts": {
|
|
"build": "npm run build-server && npm run build-client && npm run build-cli",
|
|
"build-server": "cd server && npm run build",
|
|
"build-client": "cd client && npm run build",
|
|
"build-cli": "cd cli && npm run build",
|
|
"clean": "rimraf ./node_modules ./client/node_modules ./cli/node_modules ./build ./client/dist ./server/build ./cli/build ./package-lock.json && npm install",
|
|
"dev": "node client/bin/start.js --dev",
|
|
"dev:windows": "node client/bin/start.js --dev",
|
|
"dev:sdk": "npm run link:sdk && concurrently \"npm run dev\" \"cd sdk && npm run build:esm:w\"",
|
|
"link:sdk": "(test -d sdk || ln -sf ${MCP_SDK:-$PWD/../typescript-sdk} sdk) && (cd sdk && npm link && (test -d node_modules || npm i)) && npm link @modelcontextprotocol/sdk",
|
|
"unlink:sdk": "(cd sdk && npm unlink -g) && rm sdk && npm unlink @modelcontextprotocol/sdk",
|
|
"start": "node client/bin/start.js",
|
|
"start-server": "cd server && npm run start",
|
|
"start-client": "cd client && npm run preview",
|
|
"test": "npm run prettier-check && cd client && npm test",
|
|
"test-cli": "cd cli && npm run test",
|
|
"test-server": "cd server && npm run test",
|
|
"test:e2e": "MCP_AUTO_OPEN_ENABLED=false npm run test:e2e --workspace=client",
|
|
"prettier-fix": "prettier --write .",
|
|
"prettier-check": "prettier --check .",
|
|
"lint": "prettier --check . && cd client && npm run lint",
|
|
"prepare": "husky && npm run build",
|
|
"publish-all": "npm publish --workspaces --access public --tag v1-latest && npm publish --access public --tag v1-latest",
|
|
"update-version": "node scripts/update-version.js",
|
|
"check-version": "node scripts/check-version-consistency.js"
|
|
},
|
|
"dependencies": {
|
|
"@modelcontextprotocol/inspector-cli": "^1.0.1",
|
|
"@modelcontextprotocol/inspector-client": "^1.0.1",
|
|
"@modelcontextprotocol/inspector-server": "^1.0.1",
|
|
"@modelcontextprotocol/sdk": "^1.25.2",
|
|
"concurrently": "^9.2.0",
|
|
"node-fetch": "^3.3.2",
|
|
"open": "^10.2.0",
|
|
"shell-quote": "^1.8.4",
|
|
"spawn-rx": "^5.1.2",
|
|
"ts-node": "^10.9.2",
|
|
"zod": "^3.25.76"
|
|
},
|
|
"devDependencies": {
|
|
"@playwright/test": "^1.54.1",
|
|
"@types/jest": "^29.5.14",
|
|
"@types/node": "^22.17.0",
|
|
"@types/shell-quote": "^1.7.5",
|
|
"husky": "^9.1.7",
|
|
"jest-fixed-jsdom": "^0.0.9",
|
|
"lint-staged": "^16.1.5",
|
|
"playwright": "^1.56.1",
|
|
"prettier": "3.9.5",
|
|
"rimraf": "^6.0.1",
|
|
"typescript": "^5.4.2"
|
|
},
|
|
"overrides": {
|
|
"get-intrinsic": "1.3.0",
|
|
"shell-quote": "^1.8.4",
|
|
"hono": "^4.12.25",
|
|
"form-data": "^4.0.6",
|
|
"@babel/core@<=7.29.0": "^7.29.6",
|
|
"esbuild@<0.28.1": "^0.28.1",
|
|
"minimatch@<3.1.4": "3.1.5",
|
|
"js-yaml@<4": "3.15.1",
|
|
"js-yaml@>=4": "4.3.1"
|
|
},
|
|
"engines": {
|
|
"node": ">=22.7.5"
|
|
},
|
|
"lint-staged": {
|
|
"**/*.{js,ts,jsx,tsx,json,md}": [
|
|
"prettier --write"
|
|
]
|
|
}
|
|
}
|