Carried over from the old nawabAiFrontend repo (all in frontend/, transitive build-tooling deps — brace-expansion, js-yaml, picomatch, flatted, nanoid, @babel/core). None appear to touch runtime request-handling code, but worth cleaning up.
See full list with fix versions at https://github.com/LucknowAI/nawab/security/dependabot.
Suggested approach: cd frontend && npm audit fix, review what it cannot auto-resolve, commit the updated lockfile.
Carried over from the old nawabAiFrontend repo (all in
frontend/, transitive build-tooling deps —brace-expansion,js-yaml,picomatch,flatted,nanoid,@babel/core). None appear to touch runtime request-handling code, but worth cleaning up.See full list with fix versions at https://github.com/LucknowAI/nawab/security/dependabot.
Suggested approach:
cd frontend && npm audit fix, review what it cannot auto-resolve, commit the updated lockfile.