[attu0]

…endency Vulnerabilities and Updates #115

Closes #115

📝 Description

This pull request addresses critical security vulnerabilities found in the project's npm dependencies. After running npm install, the system reported 7 vulnerabilities (3 low, 1 moderate, 2 high, 1 critical) that posed potential security risks and stability issues. This PR updates all affected dependencies to their latest secure versions while maintaining full compatibility with the existing React 19 + TypeScript + Vite stack.

🔧 Changes Made

• Fixed 7 security vulnerabilities across dependency tree: 3 low, 1 moderate, 2 high, 1 critical
• Updated npm dependencies to latest secure versions using npm audit fix
• Maintained compatibility with React 19.1.1 and modern toolchain
• Updated package-lock.json with security patches and version locks
• Verified build process works correctly with updated dependencies
• Ensured zero breaking changes to existing application functionality

📷 Screenshots or Visual Changes (if applicable)

Before: 7 vulnerabilities (3 low, 1 moderate, 2 high, 1 critical)
After: 0 vulnerabilities found

🤝 Collaboration

Collaborated with: N/A - Individual contribution

✅ Checklist

• I have read the contributing guidelines.
• I have added tests that prove my fix is effective or that my feature works.
• I have added necessary documentation (if applicable).
• Any dependent changes have been merged and published in downstream modules.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• Frontend/package-lock.json is excluded by !**/package-lock.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing Touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Saahi30]

Keeping this one over #116 because it only updates Frontend/package-lock.json. I am not merging it yet. The lockfile is from September 2025, so it needs a fresh audit against current main first. Closing #116. See #315.