Martin Vogel
952eea9f1f
Structural layer: drop the hardcoded component list — any directory containing vendored source or data files must now be covered by a license file in itself or an ancestor within the vendored tree, so newly vendored code without a license fails immediately. New third layer: the graph-UI npm production tree is resolved (postinstall scripts disabled) and every bundled package must be on the policy allow-list; unknown licenses fail. Reclassifies @tailwindcss/vite as a devDependency — it is a build plugin and was inflating the production tree with native tooling.
43 lines
1.1 KiB
JSON
43 lines
1.1 KiB
JSON
{
|
|
"name": "graph-ui",
|
|
"private": true,
|
|
"version": "0.1.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc -b && vite build",
|
|
"preview": "vite preview",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"test:coverage": "vitest run --coverage"
|
|
},
|
|
"dependencies": {
|
|
"@react-three/drei": "^10.7.0",
|
|
"@react-three/fiber": "^9.5.0",
|
|
"@react-three/postprocessing": "^3.0.4",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"lucide-react": "^0.577.0",
|
|
"postprocessing": "^6.38.3",
|
|
"radix-ui": "^1.4.3",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"tailwind-merge": "^3.5.0",
|
|
"three": "~0.183.0"
|
|
},
|
|
"devDependencies": {
|
|
"@tailwindcss/vite": "^4.2.1",
|
|
"@testing-library/jest-dom": "^6.6.0",
|
|
"@testing-library/react": "^16.1.0",
|
|
"@types/react": "^19.0.0",
|
|
"@types/react-dom": "^19.0.0",
|
|
"@types/three": "~0.183.0",
|
|
"@vitejs/plugin-react": "^4.3.0",
|
|
"jsdom": "^25.0.0",
|
|
"tailwindcss": "^4.1.0",
|
|
"typescript": "^5.7.0",
|
|
"vite": "^6.4.2",
|
|
"vitest": "^4.1.0"
|
|
}
|
|
}
|