Files
klarbild-oss/package.json
T
tillandClaude Opus 5 0798eb7438
CI / check (push) Has been cancelled
Astro 7, and stop a print-only instance calling a route it has switched off
The critical advisory in the dependency tree (GHSA-26w7-cxv4-gfx2, remote code
execution through AVIF image optimisation) has no fix inside Astro 5, so this
moves to Astro 7.3.2 with @astrojs/node 11 and current sharp. `npm audit` now
reports nothing. The only code the jump needed: `csp` graduated out of
`experimental`, and sharp's `Sharp` type is a named export now.

Also fixed, both found by testing with every module switched on rather than
only the print-only default:

- `src/pages/index.astro` passed `dict` to the studio island without ever
  defining it, so the studio page returned 500 on any instance with the AI
  module on. The print-only default redirects away from that page, which is
  why the earlier run never hit it.
- The print studio fetched `/api/delivery-targets` even with the delivery
  module off. The route answered 404 exactly as designed, but it left a red
  line in the console of every print-only instance, which reads like a fault.
  It now asks only when there is a module to ask, and hides the card otherwise.

Plus: the first-run box sizes itself to its content instead of miscounting
padding, and the README's counts are recounted rather than remembered.

Verified against a live instance on a fresh database, in both module sets:
sign-in, module gating, the German interface, an eight-up passport sheet and
its PDF. 124 tests, type check, build and secret scan all clean.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Nh4A79bbqT9dcd2inzYUdg
2026-09-15 15:23:42 +00:00

71 lines
1.9 KiB
JSON

{
"name": "klarbild",
"version": "1.0.0",
"description": "Self-hosted print studio: put pictures on paper at exactly the size you asked for. Sheet layout with crop marks, tiling, 1:1 PDF. Optional AI, delivery, sharing and Telegram modules.",
"license": "AGPL-3.0-only",
"author": "Till Heidrich",
"homepage": "https://github.com/tillheidrich/klarbild",
"repository": {
"type": "git",
"url": "https://github.com/tillheidrich/klarbild.git"
},
"bugs": {
"url": "https://github.com/tillheidrich/klarbild/issues"
},
"keywords": [
"print",
"pdf",
"photo",
"passport-photo",
"self-hosted",
"astro",
"crop-marks",
"poster",
"tiling",
"sheet-layout"
],
"type": "module",
"engines": {
"node": ">=22.6"
},
"scripts": {
"dev": "astro dev",
"build": "astro build",
"start": "node ./dist/server/entry.mjs",
"astro": "astro",
"test": "node --experimental-strip-types --test tests/*.test.ts",
"typecheck": "tsc --noEmit",
"scan": "node scripts/secret-scan.mjs"
},
"dependencies": {
"@astrojs/node": "^11.1.5",
"@astrojs/react": "^6.0.5",
"@aws-sdk/client-s3": "^3.700.0",
"@fontsource/space-grotesk": "^5.1.0",
"@fontsource/space-mono": "^5.1.0",
"archiver": "^7.0.1",
"argon2": "^0.41.1",
"astro": "^7.3.2",
"basic-ftp": "^5.0.5",
"grammy": "^1.30.0",
"heic-convert": "^2.1.0",
"nodemailer": "^9.1.0",
"pdf-lib": "^1.17.1",
"pg": "^8.13.1",
"pg-boss": "^10.1.5",
"react": "^19.0.0",
"react-dom": "^19.0.0",
"sharp": "^0.35.4",
"ssh2-sftp-client": "^11.0.0"
},
"devDependencies": {
"@types/node": "^26.5.1",
"@types/nodemailer": "^8.0.1",
"@types/pg": "^8.11.10",
"@types/react": "^19.0.0",
"@types/react-dom": "^19.0.0",
"@types/ssh2-sftp-client": "^9.0.6",
"typescript": "^5.7.2"
}
}