mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-08-09 15:20:48 +00:00
a1e4fee33d
Audit of every changed version across all 4 npm locks + uv.lock against the >=2-week supply-chain aging rule: - ip-address: 10.4.0 (8d, and a minor feature release) -> 10.3.1 (exactly 14d, the CVE-fix patch for GHSA-mwp4-54f8-5fhr) - nanoid: floating resolutions pulled 3.3.18/6.0.1 (1d/5d, post-fix releases) -> scoped overrides nanoid@^3=3.3.17 (the CVE-fix version) and nanoid@^6=6.0.0 (27d) - js-yaml/undici: scoped overrides pin the exact CVE-fix versions so transitive copies can't float to newer releases - postcss: 8.5.25/8.5.26 (2d, npm update drift) -> pinned 8.5.23 (15d) - @electron/get 5.1.0 (12d) -> 5.0.0 (108d), @electron-internal/extract-zip 1.0.5 (10d) -> 1.0.4 (45d) — electron 40.10.6's carets resolved to sub-14d releases; both were incidental drift, not CVE fixes - website: nanoid override 3.3.17 Remaining sub-14d versions are exclusively documented CVE-fix exceptions (.npmrc min-release-age-exclude entries with removal dates): brace-expansion 5.0.9, dompurify 3.4.13, js-yaml 4.3.1, mermaid 11.16.1, nanoid 3.3.17, fast-uri 3.1.5, h2 4.4.1 (pyproject exclude-newer exception). Rescan: 18 findings (blocked-upstream only). npm run check green.
79 lines
2.3 KiB
JSON
79 lines
2.3 KiB
JSON
{
|
|
"name": "hermes-agent",
|
|
"version": "1.0.0",
|
|
"description": "An AI agent with advanced tool-calling capabilities, featuring a flexible toolsets system for organizing and managing tools.",
|
|
"private": true,
|
|
"workspaces": [
|
|
"apps/*",
|
|
"ui-tui",
|
|
"ui-tui/packages/*",
|
|
"web",
|
|
"tests-js"
|
|
],
|
|
"scripts": {
|
|
"postinstall": "echo '\u2705 Browser tools ready. Run: python run_agent.py --help'",
|
|
"install:root": "npm install --workspaces=false",
|
|
"install:web": "npm install --workspace web",
|
|
"install:tui": "npm install --workspace ui-tui",
|
|
"install:desktop": "npm install --workspace apps/desktop",
|
|
"audit:root": "npm audit --workspaces=false",
|
|
"audit:web": "npm audit --workspace web",
|
|
"audit:tui": "npm audit --workspace ui-tui",
|
|
"audit:fix:root": "npm audit fix --workspaces=false",
|
|
"audit:fix:web": "npm audit fix --workspace web",
|
|
"audit:fix:tui": "npm audit fix --workspace ui-tui",
|
|
"check": "npm run --ws check",
|
|
"fix": "npm run --ws fix"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/NousResearch/Hermes-Agent.git"
|
|
},
|
|
"license": "MIT",
|
|
"bugs": {
|
|
"url": "https://github.com/NousResearch/Hermes-Agent/issues"
|
|
},
|
|
"homepage": "https://github.com/NousResearch/Hermes-Agent#readme",
|
|
"dependencies": {
|
|
"@streamdown/math": "1.0.2",
|
|
"agent-browser": "0.26.0"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "9.39.5",
|
|
"typescript-eslint": "8.64.0",
|
|
"eslint-plugin-perfectionist": "5.10.0",
|
|
"eslint-plugin-react-hooks": "7.1.1",
|
|
"eslint-plugin-unused-imports": "4.4.1",
|
|
"globals": "17.7.0"
|
|
},
|
|
"overrides": {
|
|
"lodash": "4.18.1",
|
|
"yauzl": "^3.3.1",
|
|
"protobufjs": "^8.7.1",
|
|
"brace-expansion": "5.0.9",
|
|
"mermaid": "11.16.1",
|
|
"dompurify": "3.4.13",
|
|
"ip-address": "10.3.1",
|
|
"nanoid@^3": "3.3.17",
|
|
"nanoid@^6": "6.0.0",
|
|
"js-yaml@^4": "4.3.1",
|
|
"undici@^6": "6.28.0",
|
|
"undici@^7": "7.29.0",
|
|
"postcss": "8.5.23"
|
|
},
|
|
"engines": {
|
|
"node": ">=22.22.0",
|
|
"npm": "<11.10.0 || >=11.17.0"
|
|
},
|
|
"allowScripts": {
|
|
"unicode-animations": false,
|
|
"esbuild@0.28.1": true,
|
|
"node-pty@1.1.0": true,
|
|
"electron-winstaller@5.4.0": true,
|
|
"agent-browser@0.26.0": true,
|
|
"electron@40.10.2": true,
|
|
"fsevents@2.3.2": true,
|
|
"fsevents@2.3.3": true
|
|
}
|
|
}
|