package.json

{
	"name": "@fluidframework/test-tools",
	"version": "3.0.0",
	"description": "Fluid test tools",
	"homepage": "https://fluidframework.com",
	"repository": {
		"type": "git",
		"url": "https://github.com/microsoft/FluidFramework.git",
		"directory": "tools/test-tools"
	},
	"license": "MIT",
	"author": "Microsoft and contributors",
	"main": "dist/getTestPort.js",
	"types": "dist/getTestPort.d.ts",
	"bin": {
		"assign-test-ports": "bin/assign-test-ports"
	},
	"scripts": {
		"build": "fluid-build --task build",
		"build:compile": "fluid-build --task compile",
		"build:test": "tsc --project ./src/test/tsconfig.json",
		"clean": "rimraf --glob dist \"**/*.tsbuildinfo\" \"**/*.build.log\" nyc",
		"eslint": "eslint src",
		"eslint:fix": "eslint src --fix",
		"format": "npm run prettier:fix",
		"lint": "fluid-build --task lint",
		"lint:fix": "npm run prettier:fix && npm run eslint:fix",
		"prettier": "prettier --check . --cache --ignore-path ../../.prettierignore",
		"prettier:fix": "prettier --write . --cache --ignore-path ../../.prettierignore",
		"test": "mocha",
		"tsc": "tsc"
	},
	"devDependencies": {
		"@fluidframework/build-common": "^2.0.3",
		"@fluidframework/build-tools": "^0.64.0",
		"@fluidframework/eslint-config-fluid": "^6.1.0",
		"@types/mocha": "^10.0.10",
		"@types/node": "~22.19.17",
		"eslint": "~8.57.0",
		"eslint-config-prettier": "~10.1.8",
		"mocha": "^10.8.2",
		"mocha-multi-reporters": "^1.5.1",
		"prettier": "~3.0.3",
		"rimraf": "^6.1.3",
		"typescript": "~5.4.5"
	},
	"packageManager": "pnpm@10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319",
	"pnpm": {
		"commentsOverrides": [
			"js-yaml: overridden to fix CVE-2025-64718 (prototype pollution via merge keys).",
			"diff: overridden to patched version to resolve a known ReDoS vulnerability.",
			"minimatch: overridden to patched versions to resolve known security vulnerabilities across all major version ranges.",
			"serialize-javascript: overridden to ^7.0.4 to resolve GHSA-5c6j-r48x-rmvq. No 6.x fix exists; 7.x is API-compatible (only drops Node <20 support).",
			"picomatch: overridden to patched versions to resolve a known security vulnerability."
		],
		"overrides": {
			"diff@>=5 <6": "^5.2.2",
			"js-yaml": "^4.1.1",
			"minimatch@>=3 <4": "^3.1.5",
			"minimatch@>=5 <6": "^5.1.9",
			"minimatch@>=6 <7": "^6.2.3",
			"minimatch@>=7 <8": "^7.4.9",
			"minimatch@>=8 <9": "^8.0.7",
			"minimatch@>=9 <10": "^9.0.9",
			"minimatch@>=10 <11": "^10.2.4",
			"serialize-javascript@>=6 <7": "^7.0.4",
			"picomatch@>=2 <3": "^2.3.2",
			"picomatch@>=4 <5": "^4.0.4"
		},
		"onlyBuiltDependencies": [
			"unrs-resolver"
		]
	}
}