Lucas Winther
6eb77c8733
One build artifact serves both a self-hosted subpath deploy and GitHub Pages. CI runs the tests, typechecks, builds, and smoke-tests the image. server.ts's traversal guard uses a separator-aware check (resolved === root || resolved.startsWith(root + path.sep)) instead of a bare startsWith(root), which would let a request resolving to "/app/dist-evil/x" pass a check against root "/app/dist".
37 lines
940 B
JSON
37 lines
940 B
JSON
{
|
|
"name": "bun-react-template",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "bun --hot src/index.ts",
|
|
"start": "NODE_ENV=production bun src/index.ts",
|
|
"build": "bun run build.ts",
|
|
"serve": "bun server.ts",
|
|
"test": "bun test"
|
|
},
|
|
"dependencies": {
|
|
"@radix-ui/react-label": "^2.1.7",
|
|
"@radix-ui/react-select": "^2.2.6",
|
|
"@radix-ui/react-slot": "^1.2.3",
|
|
"bun-plugin-tailwind": "^0.1.2",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"fflate": "^0.8.3",
|
|
"lucide-react": "^1",
|
|
"radix-ui": "^1.6.7",
|
|
"react": "^19",
|
|
"react-dom": "^19",
|
|
"react-router": "^8.3.1",
|
|
"tailwind-merge": "^3.3.1",
|
|
"tw-animate-css": "^1.4.0"
|
|
},
|
|
"devDependencies": {
|
|
"@happy-dom/global-registrator": "^20.12.0",
|
|
"@types/bun": "latest",
|
|
"@types/react": "^19",
|
|
"@types/react-dom": "^19",
|
|
"tailwindcss": "^4.1.11"
|
|
}
|
|
}
|