Tighten the remaining high-signal security findings by switching the todo example to a standard Express rate limiter, removing sensitive metadata from boilerplate logging, and replacing fragile HTML tag filtering with parser-based conversion. Co-Authored-By: Claude <noreply@anthropic.com>
30 lines
672 B
JSON
30 lines
672 B
JSON
{
|
|
"name": "todo-app-backend",
|
|
"version": "1.0.0",
|
|
"description": "Todo app backend with Express and SQLite",
|
|
"main": "dist/index.js",
|
|
"scripts": {
|
|
"build": "tsc",
|
|
"start": "node dist/index.js",
|
|
"dev": "ts-node src/index.ts"
|
|
},
|
|
"dependencies": {
|
|
"better-sqlite3": "^12.8.0",
|
|
"cors": "^2.8.5",
|
|
"express": "^4.18.2",
|
|
"express-rate-limit": "^8.3.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/better-sqlite3": "^7.6.13",
|
|
"@types/cors": "^2.8.19",
|
|
"@types/express": "^4.17.20",
|
|
"@types/node": "^20.10.0",
|
|
"ts-node": "^10.9.1",
|
|
"typescript": "^5.3.0"
|
|
},
|
|
"overrides": {
|
|
"diff": "4.0.4",
|
|
"qs": "^6.15.0"
|
|
}
|
|
}
|