diff --git a/bin/init.js b/bin/init.js index 24a9a7e..0dc4e27 100644 --- a/bin/init.js +++ b/bin/init.js @@ -564,8 +564,8 @@ export async function init( packageJson.dependencies['next-auth'] = '^4.24.11'; } - // Add security overrides for vulnerable packages - packageJson.overrides = { + // Add security overrides for vulnerable packages (compatible with npm, Yarn, and pnpm) + const securityOverrides = { "backslash": "0.2.0", "chalk-template": "1.1.0", "supports-hyperlinks": "4.1.0", @@ -585,6 +585,17 @@ export async function init( "ansi-styles": "6.2.1" }; + // npm v8.3+ overrides + packageJson.overrides = securityOverrides; + + // Yarn (v1 and Berry) resolutions + packageJson.resolutions = securityOverrides; + + // pnpm overrides (namespaced) + packageJson.pnpm = { + overrides: securityOverrides + }; + fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2)); // Handle .env file diff --git a/package.json b/package.json index 7f3de98..a04dbf3 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@neynar/create-farcaster-mini-app", - "version": "1.8.8", + "version": "1.8.9", "type": "module", "private": false, "access": "public",