ip had a high severity SSRF vuln (GHSA-2p57-rm9w-gvfp) with no upstream fix. Replace with: - net.isIPv4/isIPv6 (Node built-in) for format validation - ipaddr.js for CIDR subnet matching Add package-lock.json for reproducible builds (required for npm ci). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
19 lines
384 B
JSON
19 lines
384 B
JSON
{
|
|
"name": "f2b-control-center",
|
|
"version": "1.0.0",
|
|
"description": "Fail2Ban dashboard for Nginx Proxy Manager — batteries-included security monitoring",
|
|
"main": "server.js",
|
|
"scripts": {
|
|
"start": "node server.js"
|
|
},
|
|
"engines": {
|
|
"node": ">=18"
|
|
},
|
|
"dependencies": {
|
|
"dotenv": "*",
|
|
"express": "*",
|
|
"ipaddr.js": "*",
|
|
"node-fetch": "^2"
|
|
}
|
|
}
|