Files
intelligence-terminal/package.json
XAOSTECH b5726cd2f6 fix(security): patch undici CVEs, restore discord.js@14, sync license in lockfile
- npm audit fix --force had silently installed discord.js@13 (deprecated)
  despite package.json declaring ^14.25.0; restored to 14.25.1
- Added overrides.undici >=7.24.4 to patch GHSA-g9mf, GHSA-f269,
  GHSA-2mjp, GHSA-vrm6, GHSA-v9p9, GHSA-4992 without breaking changes
- package-lock.json license field corrected ISC -> AGPL-3.0-only
  to match package.json (lockfile was out of sync from project init)
2026-03-16 23:55:38 +01:00

37 lines
923 B
JSON

{
"name": "crucix",
"version": "2.0.0",
"description": "Local intelligence engine — 26 OSINT sources, live dashboard, auto-refresh, optional LLM layer.",
"type": "module",
"scripts": {
"start": "node server.mjs",
"dev": "node --trace-warnings server.mjs",
"sweep": "node apis/briefing.mjs",
"inject": "node dashboard/inject.mjs",
"brief": "node apis/briefing.mjs",
"brief:save": "node apis/save-briefing.mjs",
"diag": "node diag.mjs",
"clean": "node scripts/clean.mjs",
"fresh-start": "npm run clean && npm start"
},
"keywords": [
"osint",
"intelligence",
"dashboard",
"geopolitical"
],
"author": "Crucix",
"license": "AGPL-3.0-only",
"engines": {
"node": ">=22",
"npm": ">=10"
},
"dependencies": {
"express": "^5.1.0"
},
"optionalDependencies": {
"discord.js": "^14.25.1" },
"overrides": {
"undici": "^7.24.4" }
}