modelcontextprotocol/typescript-sdk
Watch
1
0
Fork
You've already forked typescript-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix: resolve pnpm audit vulnerabilities by removing @pnpm/workspace.* deps (#1422)

Browse source
This commit is contained in:
Felix Weinberger 2026-01-23 16:30:29 +00:00 • committed by GitHub
commit 11e326692b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 2373 additions and 5827 deletions
Download patch file Download diff file Expand all files Collapse all files

3
package.json
View file

@ -50,8 +50,6 @@
"@modelcontextprotocol/conformance": "0.1.10",
"@modelcontextprotocol/server": "workspace:^",
"@modelcontextprotocol/node": "workspace:^",
"@pnpm/workspace.find-packages": "^1000.0.54",
"@pnpm/workspace.read-manifest": "^1000.2.9",
"@types/content-type": "catalog:devTools",
"@types/cors": "catalog:devTools",
"@types/cross-spawn": "catalog:devTools",
@ -66,6 +64,7 @@
"eslint": "catalog:devTools",
"eslint-config-prettier": "catalog:devTools",
"eslint-plugin-n": "catalog:devTools",
"fast-glob": "^3.3.3",
"express": "catalog:runtimeServerOnly",
"prettier": "catalog:devTools",
"supertest": "catalog:devTools",

3465
pnpm-lock.yaml generated
View file

File diff suppressed because it is too large Load diff

18
typedoc.config.mjs
View file

@ -1,12 +1,18 @@
import { OptionDefaults } from 'typedoc';
import { findWorkspacePackages } from '@pnpm/workspace.find-packages';
import { readWorkspaceManifest } from '@pnpm/workspace.read-manifest';
import fg from 'fast-glob';
import { readFileSync } from 'node:fs';
import { join } from 'node:path';
// Read workspace manifest and find all public packages
const workspaceManifest = await readWorkspaceManifest(process.cwd());
const packages = await findWorkspacePackages(process.cwd(), {
patterns: workspaceManifest?.packages
// Find all package.json files in packages/*/ and build package list
const packageJsonPaths = await fg('packages/*/package.json', {
cwd: process.cwd()
});
const packages = packageJsonPaths.map(p => {
const rootDir = join(process.cwd(), p.replace('/package.json', ''));
const manifest = JSON.parse(readFileSync(join(process.cwd(), p), 'utf8'));
return { rootDir, manifest };
});
const publicPackages = packages.filter(p => p.manifest.private !== true);
const entryPoints = publicPackages.map(p => p.rootDir);