app-formbricks/package.json at main · code/app-formbricks · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
{
  "name": "formbricks",
  "version": "0.0.0",
  "private": true,
  "workspaces": [
    "apps/*",
    "packages/*"
  ],
  "prisma": {
    "schema": "packages/database/schema.prisma"
  },
  "scripts": {
    "agents:update": "npx @next/codemod@canary agents-md --output AGENTS.md",
    "clean:all": "turbo run clean && rimraf node_modules pnpm-lock.yaml .turbo coverage out",
    "clean": "turbo run clean && rimraf node_modules .turbo coverage out",
    "build": "turbo run build",
    "build:dev": "turbo run build:dev",
    "db:migrate:dev": "turbo run db:migrate:dev",
    "db:migrate:deploy": "turbo run db:migrate:deploy",
    "db:start": "turbo run db:start",
    "db:push": "turbo run db:push",
    "db:seed": "turbo run db:seed",
    "db:seed:clear": "turbo run db:seed -- -- --clear",
    "db:up": "docker compose -f docker-compose.dev.yml up -d",
    "db:down": "docker compose -f docker-compose.dev.yml down",
    "go": "pnpm db:up && turbo run go --concurrency 20",
    "dev": "turbo run dev --parallel",
    "pre-commit": "lint-staged",
    "start": "turbo run start --parallel",
    "format": "prettier --write \"**/*.{ts,tsx,md}\"",
    "generate": "turbo run generate",
    "lint": "turbo run lint",
    "typecheck": "turbo run typecheck",
    "test": "turbo run test --no-cache",
    "test:coverage": "turbo run test:coverage --no-cache",
    "test:e2e": "playwright test",
    "test-e2e:azure": "pnpm test:e2e -c playwright.service.config.ts --workers=10",
    "prepare": "husky install",
    "storybook": "turbo run storybook",
    "fb-migrate-dev": "pnpm --filter @formbricks/database create-migration && pnpm prisma generate",
    "i18n:surveys:generate": "pnpm --filter @formbricks/surveys i18n:generate",
    "i18n:web:generate": "pnpm --filter @formbricks/web i18n:generate",
    "generate-translations": "pnpm i18n:web:generate && pnpm i18n:surveys:generate",
    "scan-translations": "pnpm --filter @formbricks/i18n-utils scan-translations",
    "i18n": "pnpm generate-translations && pnpm scan-translations",
    "i18n:validate": "pnpm scan-translations",
    "dev:setup": "bash scripts/setup-dev-env.sh"
  },
  "dependencies": {
    "react": "19.2.6",
    "react-dom": "19.2.6"
  },
  "devDependencies": {
    "@azure/playwright": "1.1.5",
    "@formbricks/eslint-config": "workspace:*",
    "@playwright/test": "1.58.2",
    "eslint": "8.57.1",
    "husky": "9.1.7",
    "lint-staged": "16.4.0",
    "rimraf": "6.1.3",
    "tsx": "4.21.0",
    "turbo": "2.9.14"
  },
  "lint-staged": {
    "(apps|packages)/**/*.{js,ts,jsx,tsx}": [
      "prettier --write"
    ],
    "*.json": [
      "prettier --write"
    ],
    "packages/database/schema.prisma": [
      "prisma format"
    ]
  },
  "engines": {
    "node": ">=20.18.1"
  },
  "packageManager": "pnpm@10.32.1",
  "nextBundleAnalysis": {
    "budget": 358400,
    "budgetPercentIncreaseRed": 20,
    "minimumChangeThreshold": 0,
    "showDetails": true
  },
  "pnpm": {
    "overrides": {
      "@hono/node-server": "1.19.13",
      "@protobufjs/utf8": "1.1.1",
      "@tootallnate/once": "3.0.1",
      "@xmldom/xmldom": "0.9.10",
      "ajv@6": "6.14.0",
      "axios": "1.16.0",
      "effect": "3.20.0",
      "fast-uri": "3.1.2",
      "fast-xml-parser": "5.7.0",
      "hono": "4.12.18",
      "ip-address": "10.1.1",
      "js-cookie": "3.0.7",
      "lodash": "4.18.1",
      "minimatch@10": "10.2.5",
      "node-forge": "1.4.0",
      "postcss": "8.5.14",
      "protobufjs@7": "7.5.8",
      "protobufjs@8": "8.2.0",
      "qs@6": "6.15.2",
      "tar": "7.5.15",
      "uuid@8": "11.1.1",
      "uuid@9": "11.1.1",
      "uuid@11": "11.1.1",
      "ws@8": "8.21.0",
      "yaml@2": "2.9.0"
    },
    "comments": {
      "overrides": "Security fixes for transitive dependencies that still fail a no-override audit. Remove each override when its upstream chain adopts a patched version: @hono/node-server/hono via Prisma dev tooling | @protobufjs/utf8 (CVE overlong UTF-8) - awaiting @opentelemetry/otlp-transformer update | @tootallnate/once and tar via sqlite3/node-gyp chain | @xmldom/xmldom (XML injection/DoS CVEs) - awaiting @boxyhq/saml20 to pin to >=0.9.10 | axios, lodash, and node-forge via @boxyhq/saml-jackson | ajv@6 via webpack/eslint | effect (GHSA-38f7-945m-qr2g) - awaiting @prisma/config update | fast-uri (CVE-2025-48944/48945) - awaiting ajv/schema-utils update | fast-xml-parser via AWS SDK XML builder | ip-address (XSS in Address6) - awaiting mongodb/socks update | js-cookie (GHSA-qjx8-664m-686j prototype hijack) - awaiting react-use to bump to >=3.0.7 | minimatch@10 (CVE-2026-27904 / GHSA-23c5-xmqv-rm74, nested extglob ReDoS) - awaiting @rushstack/node-core-library (via vite-plugin-dts -> @microsoft/api-extractor) to bump to >=10.2.3 | postcss (CVE-2025-62695) - awaiting next.js to unpin postcss | protobufjs@7/8 (GHSA-xq3m-2v4x-88gg et al.) - awaiting @grpc/proto-loader/otlp-transformer update | qs@6 (GHSA-q8mj-m7cp-5q26 DoS) - awaiting @googleapis/admin via @boxyhq/saml-jackson update | uuid@8/9/11 (GHSA-w5hq-g745-h8pq buffer bounds, CVE-2025-61475) - awaiting @azure/msal-node, @sentry/webpack-plugin and typeorm updates | ws@8 (GHSA-58qx-3vcg-4xpx memory disclosure) - awaiting storybook and react-email/socket.io updates | yaml@2 (GHSA-48c2-rrv3-qjmp stack overflow) - awaiting lint-staged update"
    },
    "patchedDependencies": {
      "next-auth@4.24.13": "patches/next-auth@4.24.13.patch"
    }
  }
}