blog-admin-web/package.json
灌糖包子 d5d82d3488
fix: 修复 npm 依赖安全漏洞并消除 CSS 顺序警告
- 执行 npm audit fix 自动修复 41 个漏洞中的大部分(babel、webpack、axios 等)
- 在 package.json 中添加 overrides 强制升级无法自动修复的间接依赖:
  - postcss >= 8.4.31(修复 CVE in @vue/component-compiler-utils)
  - serialize-javascript >= 7.0.5(修复 XSS/RCE in copy-webpack-plugin)
  - webpack-dev-server >= 5.2.1(修复源码泄露漏洞)
- 漏洞数从 41 降至 0
- vue.config.js 中为 mini-css-extract-plugin 添加 ignoreOrder: true,
  消除 Element Plus 按需导入时不同路由 chunk CSS 顺序冲突的警告

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-11 01:10:58 +08:00

45 lines
1.0 KiB
JSON

{
"name": "blog-admin-web",
"version": "0.1.0",
"scripts": {
"dev": "vue-cli-service serve",
"build": "vue-cli-service build"
},
"dependencies": {
"@element-plus/icons-vue": "^2.3.2",
"axios": "^1.13.6",
"echarts": "^5.6.0",
"element-plus": "^2.13.5",
"hls.js": "^1.6.15",
"hyperdown": "^2.4.31",
"moment": "^2.30.1",
"pretty-bytes": "^5.6.0",
"vue": "^3.5.30",
"vue-router": "^4.6.4",
"vuex": "^4.1.0"
},
"devDependencies": {
"@vue/cli-plugin-babel": "~5.0.0",
"@vue/cli-plugin-router": "~5.0.0",
"@vue/cli-plugin-typescript": "~5.0.0",
"@vue/cli-plugin-vuex": "~5.0.0",
"@vue/cli-service": "~5.0.0",
"less": "^4.6.4",
"less-loader": "^8.0.0",
"typescript": "^5.4.0",
"unplugin-auto-import": "^0.12.1",
"unplugin-vue-components": "^0.22.12"
},
"overrides": {
"postcss": ">=8.4.31",
"serialize-javascript": ">=7.0.5",
"webpack-dev-server": ">=5.2.1"
},
"browserslist": [
"> 1%",
"last 2 versions",
"not dead",
"not ie 11"
]
}