mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-09-13 18:32:12 +03:00
384ce49a4d
Two Dependabot alerts on the opencode plugin workspaces, both dev-scope: - #209 (high) toml@4.1.1 — prototype pollution via `__proto__` key-path desynchronization (GHSA-v5mp-jgw5-2x6j), pulled transitively by `effect` under `@opencode-ai/plugin`. Patched in 4.1.2. - #210 (low) esbuild@0.27.7 — arbitrary file read from the dev server on Windows (GHSA-g7r4-m6w7-qqqr), nested under `tsup`. Patched in 0.28.1. The top-level esbuild was already 0.28.1; only the nested copy lagged. Both are resolved with an `overrides` entry, reusing the pattern the v1 plugin already applies to esbuild. Neither package reaches the published runtime — they are build-time only — so this is hygiene, not an exposure fix. toml 4.1.1 -> 4.3.0, nested esbuild 0.27.7 dropped (single 0.28.2 remains). `npm install` reports 0 vulnerabilities in both workspaces; both plugins build and their suites pass (367 and 218 tests).
71 lines
1.6 KiB
JSON
71 lines
1.6 KiB
JSON
{
|
|
"name": "@omniroute/opencode-plugin-v2",
|
|
"version": "0.1.0",
|
|
"description": "OmniRoute OpenCode plugin (v2 Promise API): catalog transform with models, combos, enrichment, and naming.",
|
|
"type": "module",
|
|
"main": "./dist/index.js",
|
|
"types": "./dist/index.d.ts",
|
|
"exports": {
|
|
".": {
|
|
"types": "./dist/index.d.ts",
|
|
"import": "./dist/index.js"
|
|
}
|
|
},
|
|
"files": [
|
|
"dist",
|
|
"README.md",
|
|
"LICENSE"
|
|
],
|
|
"scripts": {
|
|
"build": "tsup",
|
|
"clean": "rm -rf dist",
|
|
"test": "node --import tsx/esm --test tests/*.test.ts",
|
|
"prepublishOnly": "npm run clean && npm run build && npm test"
|
|
},
|
|
"dependencies": {
|
|
"zod": "^4.4.3"
|
|
},
|
|
"devDependencies": {
|
|
"@opencode-ai/plugin": "1.18.29",
|
|
"@types/node": "^22.19.19",
|
|
"tsup": "^8.5.1",
|
|
"tsx": "^4.22.3",
|
|
"typescript": "^5.9.3"
|
|
},
|
|
"engines": {
|
|
"node": ">=22.22.3"
|
|
},
|
|
"license": "MIT",
|
|
"author": "OmniRoute contributors",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/diegosouzapw/OmniRoute.git",
|
|
"directory": "@omniroute/opencode-plugin-v2"
|
|
},
|
|
"homepage": "https://github.com/diegosouzapw/OmniRoute/tree/main/%40omniroute/opencode-plugin-v2#readme",
|
|
"bugs": {
|
|
"url": "https://github.com/diegosouzapw/OmniRoute/issues"
|
|
},
|
|
"keywords": [
|
|
"omniroute",
|
|
"opencode",
|
|
"opencode-plugin",
|
|
"opencode-v2",
|
|
"ai-sdk",
|
|
"openai-compatible",
|
|
"provider",
|
|
"catalog",
|
|
"combos",
|
|
"gemini"
|
|
],
|
|
"publishConfig": {
|
|
"access": "public"
|
|
},
|
|
"peerDependencies": {
|
|
"@opencode-ai/plugin": ">=1.18.29 <2"
|
|
},
|
|
"overrides": {
|
|
"esbuild": "^0.28.1"
|
|
}
|
|
}
|