bruno/ifcurl
1
0
Fork 0
mirror of https://github.com/brunopostle/ifcurl.git synced 2026-07-12 10:18:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
ifcurl/forgejo/package.json

22 lines
459 B
JSON
Raw Normal View History

viewer: bundle JS deps locally — removes all CDN dependencies Replace importmap pointing at esm.sh/unpkg with locally-bundled files built from pinned npm packages (package.json + lockfile). Run `cd forgejo && npm install && npm run build` to regenerate after a version bump. Tracked in ifcurl-dkz: fast-xml-parser CVEs in @thatopen/components 3.3.1 should be addressed in a follow-up upgrade. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:24:50 +01:00
{
"name": "ifcurl-viewer",
"private": true,
"type": "module",
"scripts": {
forgejo: add JS unit tests, extract pure functions into viewer-util.js Extract parseCommitHref, isSimpleTypeSelector, subtractIdMap, and isCommitHash into a new viewer-util.js ES module so they can be tested without a browser. Convert ifcurl.js from an IIFE to an ES module importing from viewer-util.js; update footer.tmpl to type="module". Add node:test suites for viewer-url.js (32 tests) and viewer-util.js (28 tests). Add npm test script and document it in the build section. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-27 20:24:58 +01:00
"build": "node build.js",
"test": "node --test tests/*.test.js"
viewer: bundle JS deps locally — removes all CDN dependencies Replace importmap pointing at esm.sh/unpkg with locally-bundled files built from pinned npm packages (package.json + lockfile). Run `cd forgejo && npm install && npm run build` to regenerate after a version bump. Tracked in ifcurl-dkz: fast-xml-parser CVEs in @thatopen/components 3.3.1 should be addressed in a follow-up upgrade. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:24:50 +01:00
},
"dependencies": {
viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix three 0.177→0.184, web-ifc 0.0.75→0.0.77, @thatopen/components 3.3.1→3.4.2, @thatopen/fragments 3.3.1→3.4.3, + new camera-controls 3.1.2 peer dep. Reduces fast-xml-parser findings from 2 critical to 1 high + 1 low; remaining issues are upstream in @thatopen >= 3.3.3 with no fix released yet. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:59:02 +01:00
"@thatopen/components": "3.4.2",
forgejo: add @thatopen/components-front, fix click-to-identify and model overview Bundle OBCF (components-front) alongside OBC so Highlighter is sourced from the correct package. Update click handler to use item.getGuid() — GlobalId is no longer in the attributes map in fragments 3.4.x. Fix populateMetaPanel crash (ClassificationGroupData now wraps ids in a .map property, not a plain object). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-28 00:01:19 +01:00
"@thatopen/components-front": "^3.4.2",
viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix three 0.177→0.184, web-ifc 0.0.75→0.0.77, @thatopen/components 3.3.1→3.4.2, @thatopen/fragments 3.3.1→3.4.3, + new camera-controls 3.1.2 peer dep. Reduces fast-xml-parser findings from 2 critical to 1 high + 1 low; remaining issues are upstream in @thatopen >= 3.3.3 with no fix released yet. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:59:02 +01:00
"@thatopen/fragments": "3.4.3",
"camera-controls": "3.1.2",
viewer: bundle JS deps locally — removes all CDN dependencies Replace importmap pointing at esm.sh/unpkg with locally-bundled files built from pinned npm packages (package.json + lockfile). Run `cd forgejo && npm install && npm run build` to regenerate after a version bump. Tracked in ifcurl-dkz: fast-xml-parser CVEs in @thatopen/components 3.3.1 should be addressed in a follow-up upgrade. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:24:50 +01:00
"jszip": "3.10.1",
viewer: upgrade three/web-ifc/@thatopen to latest — partial CVE fix three 0.177→0.184, web-ifc 0.0.75→0.0.77, @thatopen/components 3.3.1→3.4.2, @thatopen/fragments 3.3.1→3.4.3, + new camera-controls 3.1.2 peer dep. Reduces fast-xml-parser findings from 2 critical to 1 high + 1 low; remaining issues are upstream in @thatopen >= 3.3.3 with no fix released yet. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:59:02 +01:00
"three": "0.184.0",
"web-ifc": "0.0.77"
viewer: bundle JS deps locally — removes all CDN dependencies Replace importmap pointing at esm.sh/unpkg with locally-bundled files built from pinned npm packages (package.json + lockfile). Run `cd forgejo && npm install && npm run build` to regenerate after a version bump. Tracked in ifcurl-dkz: fast-xml-parser CVEs in @thatopen/components 3.3.1 should be addressed in a follow-up upgrade. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 18:24:50 +01:00
},
"devDependencies": {
"esbuild": "^0.25.0"
}
}
Reference in a new issue Copy permalink