- 执行 npm audit fix 自动修复 41 个漏洞中的大部分(babel、webpack、axios 等) - 在 package.json 中添加 overrides 强制升级无法自动修复的间接依赖: - postcss >= 8.4.31(修复 CVE in @vue/component-compiler-utils) - serialize-javascript >= 7.0.5(修复 XSS/RCE in copy-webpack-plugin) - webpack-dev-server >= 5.2.1(修复源码泄露漏洞) - 漏洞数从 41 降至 0 - vue.config.js 中为 mini-css-extract-plugin 添加 ignoreOrder: true, 消除 Element Plus 按需导入时不同路由 chunk CSS 顺序冲突的警告 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
45 lines
1.0 KiB
JSON
45 lines
1.0 KiB
JSON
{
|
|
"name": "blog-admin-web",
|
|
"version": "0.1.0",
|
|
"scripts": {
|
|
"dev": "vue-cli-service serve",
|
|
"build": "vue-cli-service build"
|
|
},
|
|
"dependencies": {
|
|
"@element-plus/icons-vue": "^2.3.2",
|
|
"axios": "^1.13.6",
|
|
"echarts": "^5.6.0",
|
|
"element-plus": "^2.13.5",
|
|
"hls.js": "^1.6.15",
|
|
"hyperdown": "^2.4.31",
|
|
"moment": "^2.30.1",
|
|
"pretty-bytes": "^5.6.0",
|
|
"vue": "^3.5.30",
|
|
"vue-router": "^4.6.4",
|
|
"vuex": "^4.1.0"
|
|
},
|
|
"devDependencies": {
|
|
"@vue/cli-plugin-babel": "~5.0.0",
|
|
"@vue/cli-plugin-router": "~5.0.0",
|
|
"@vue/cli-plugin-typescript": "~5.0.0",
|
|
"@vue/cli-plugin-vuex": "~5.0.0",
|
|
"@vue/cli-service": "~5.0.0",
|
|
"less": "^4.6.4",
|
|
"less-loader": "^8.0.0",
|
|
"typescript": "^5.4.0",
|
|
"unplugin-auto-import": "^0.12.1",
|
|
"unplugin-vue-components": "^0.22.12"
|
|
},
|
|
"overrides": {
|
|
"postcss": ">=8.4.31",
|
|
"serialize-javascript": ">=7.0.5",
|
|
"webpack-dev-server": ">=5.2.1"
|
|
},
|
|
"browserslist": [
|
|
"> 1%",
|
|
"last 2 versions",
|
|
"not dead",
|
|
"not ie 11"
|
|
]
|
|
}
|