abecms / abecms

package.json

{
  "name": "abecms",
  "version": "3.7.3",
  "description": "Abe: The lightning fast CMS",
  "main": "src/server/app.js",
  "bugs": "https://github.com/abecms/abecms/issues",
  "repository": {
    "type": "git",
    "url": "git://github.com/abecms/abecms.git"
  },
  "scripts": {
    "lint": "eslint src --fix",
    "test": "mocha --recursive --compilers js:babel-register --require babel-polyfill tests/unit",
    "test-cov": "istanbul cover _mocha -- --recursive --compilers js:babel-register --require babel-polyfill tests/unit",
    "test-coveralls": "istanbul cover _mocha --report lcovonly -- --recursive --compilers js:babel-register --require babel-polyfill -R spec tests/unit && cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage",
    "install-selenium": "node nightwatch.conf.js",
    "pretest-e2e": "ROOT=$PWD/tests/demo ./dist/index.js serve -p 3003 &",
    "test-e2e": "sleep 6 && node_modules/.bin/nightwatch --config nightwatch.conf.js",
    "posttest-e2e": "kill -9 $(lsof -ti tcp:3003)",
    "preversion": "npm test",
    "postversion": "git push origin master --follow-tags && npm publish",
    "start": "node --debug --harmony ./dist/server/index.js",
    "babel": "babelify --presets [ es2015 ] src/server/public/abecms/scripts/template-engine.js -o src/server/public/abecms/scripts/template-engine-compiled.js",
    "watch": "./node_modules/.bin/parallelshell './node_modules/.bin/watchify -v -t [ babelify --presets [ es2015 ] ] src/server/public/abecms/scripts/template-engine.js -o src/server/public/abecms/scripts/template-engine-compiled.js' './node_modules/.bin/watchify -v -t [ babelify --presets [ es2015 ] ] src/server/public/abecms/scripts/admin.js -o src/server/public/abecms/scripts/admin-compiled.js' './node_modules/.bin/watchify -v -t [ babelify --presets [ es2015 ] ] src/server/public/abecms/scripts/user-login.js -o src/server/public/abecms/scripts/user-login-compiled.js' 'npm run watch:sass'",
    "watch:sass": "./node_modules/.bin/watch 'npm run sass' ./src/server/sass",
    "babel-app": "node_modules/.bin/babel-node --presets es2015",
    "build": "node_modules/.bin/babel-node --presets es2015 src/cli/build/template.js",
    "mvasset": "mkdirp dist/server/public/abecms && cp -r src/server/locale dist/server && cp -r src/server/views dist/server && cp -r src/server/public/abecms/css dist/server/public/abecms && cp -r src/server/public/abecms/libs dist/server/public/abecms && cp -r src/server/public/abecms/fonts dist/server/public/abecms && cp -r src/server/public/abecms/image dist/server/public/abecms",
    "sass": "node ./src/tasks/sass.js",
    "js:users": "browserify -t [ babelify --presets [ es2015 ] ] src/server/public/abecms/scripts/user-login.js -o src/server/public/abecms/scripts/user-login-compiled.js",
    "js:admin": "browserify -t [ babelify --presets [ es2015 ] ] src/server/public/abecms/scripts/admin.js -o src/server/public/abecms/scripts/admin-compiled.js",
    "js:engine": "browserify -t [ babelify --presets [ es2015 ] ] src/server/public/abecms/scripts/template-engine.js -o src/server/public/abecms/scripts/template-engine-compiled.js",
    "build:front": "npm run js:admin && npm run js:users && npm run js:engine && npm run sass",
    "build:scripts": "npm run build:front && ./node_modules/.bin/babel --presets es2015,stage-0 -d dist/server src/server/ && ./node_modules/.bin/babel --presets es2015,stage-0 -d dist/cli src/cli/ && npm run mvasset",
    "compile": "./node_modules/.bin/babel --presets es2015,stage-0 -d dist/ src/ && cp -r src/cli/core/config/config.json dist/cli/core/config/config.json",
    "distribute": "npm run build:front && npm run compile && npm run mvasset",
    "watchdev": "npm run build:front && npm run compile && npm run mvasset && nodemon --debug --exec npm run compile && npm run mvasset --kill-others",
    "startdev": "npm run build:front && npm run compile && npm run mvasset && node src/tasks/nodemon.js & npm run watch --kill-others",
    "startdevOnly": "npm run js:admin && npm run js:users && npm run js:engine && node src/tasks/nodemon.js & npm run watch --kill-others"

This dependency has a security advisory: Symlink Arbitrary File Overwrite
Recommendation: Update to a version 2.0.0 or greater

  },
  "author": "Gregory Besson",
  "license": "MIT",
  "contributors": [
    {
      "name": "Gregory Besson",
      "url": "https://github.com/gregorybesson"
    },
    {
      "name": "Fabrice Labbe",
      "url": "https://github.com/wonknu"
    },
    {
      "name": "Nicolas Labbe",
      "url": "https://github.com/nicolaslabbe"
    },
    {
      "name": "Olivier Pompilius",
      "url": "https://github.com/opompilius"
    }
  ],
  "preferGlobal": true,
  "bin": {
    "abe": "dist/index.js"
  },
  "dependencies": {
    "ajax-request": "^1.2.1",
    "bcrypt-nodejs": "0.0.3",
    "bluebird": "^3.4.6",
    "body-parser": "^1.17.1",
    "child-process-promise": "^2.1.3",
    "cli-color": "^1.1.0",
    "commander": "^2.9.0",
    "connect-busboy": "0.0.2",
    "connect-flash": "^0.1.1",
    "cookie-parser": "^1.4.1",
    "cookies": "^0.6.2",
    "csurf": "^1.8.3",
    "debug": "^2.6.0",

This dependency has a security advisory: Regular Expression Denial of Service
Recommendation: Upgrade to version 2.6.9 or greater if you are on the 2.6.x series or 3.1.0 or greater.

    "deepmerge": "^1.3.2",
    "dir-compare": "^1.2.0",
    "dragula": "^3.7.2",
    "express": "^4.15.2",
    "express-handlebars": "^3.0.0",
    "express-secure-handlebars": "^2.1.0",
    "express-session": "^1.13.0",
    "express-validator": "^3.2.1",
    "extend": "^3.0.0",
    "extract-zip": "^1.6.0",
    "fs-compare": "0.0.4",
    "fs-extra": "^2.0.0",
    "handlebars": "^4.0.3",
    "handlebars-helper-slugify": "^0.3.2",
    "handlebars-helpers": "^0.8.0",
    "handlebars-intl": "^1.1.1",
    "helmet": "^3.1.0",
    "helper-markdown": "^0.2.1",
    "html-minifier": "^3.1.0",
    "https": "^1.0.0",
    "inquirer": "^3.0.6",
    "jimp": "^0.2.27",
    "jwt-simple": "^0.5.1",
    "limax": "^1.4.0",
    "lodash": "^4.17.4",
    "mkdirp": "^0.5.1",
    "moment": "^2.15.2",
    "nanoajax": "^0.4.0",
    "node-dev": "^3.1.3",
    "node-sqlparser": "^1.0.2",
    "nodemailer": "^2.6.4",
    "nodemailer-mailgun-transport": "^1.2.4",
    "nodemailer-mandrill-transport": "^1.2.0",
    "nodemailer-sendgrid-transport": "^0.2.0",
    "oauth2orize": "^1.7.0",
    "on": "^1.3.0",
    "openurl": "^1.1.0",
    "owasp-password-strength-test": "^1.3.0",
    "passport": "^0.3.2",
    "passport-http": "^0.3.0",
    "passport-http-bearer": "^1.0.1",
    "passport-local": "^1.0.0",
    "passport-oauth2-client-password": "^0.1.2",
    "prettyjson": "^1.1.3",
    "prompt": "^1.0.0",
    "qs": "^6.0.1",
    "ratelimiter": "^2.2.0",
    "redis": "^2.6.0-1",
    "request": "^2.69.0",

This dependency has a security advisory: Remote Memory Exposure
Recommendation: Upgrade request to version 2.68.0 or higher.
Note that versions 2.47.0-2.51.0 are not vulnerable due to a node level error that occurs when a number is passed as the body.

    "smartcrop-cli": "^1.0.2",
    "smtp-server": "^1.17.0",
    "striptags": "^2.2.1",
    "surge": "^0.19.0",
    "tiny-lr": "^1.0.4",
    "uuid": "^3.0.0",
    "watch": "^1.0.1",
    "which": "^1.2.11",
    "xss": "^0.3.2"
  },
  "devDependencies": {
    "babel-cli": "^6.24.1",
    "babel-code-frame": "^6.22.0",
    "babel-polyfill": "^6.23.0",
    "babel-preset-es2015": "^6.9.0",
    "babel-preset-stage-0": "^6.3.13",
    "babel-register": "^6.16.3",
    "babelify": "^7.2.0",
    "browserify": "^14.0.0",
    "chai": "^3.5.0",
    "coveralls": "^2.11.14",
    "diff": "^3.3.0",
    "eslint": "^3.6.0",
    "eslint-plugin-prettier": "^2.1.2",
    "esutils": "^2.0.2",
    "graceful-fs": "^4.1.11",
    "inflight": "^1.0.6",
    "inherits": "^2.0.3",
    "invariant": "^2.2.2",
    "istanbul": "^1.1.0-alpha.1",
    "jsesc": "^2.5.1",
    "json5": "^0.5.1",
    "mkpath": "^1.0.0",
    "mocha": "^3.0.2",
    "nightwatch": "^0.9.16",
    "node-sass": "^4.3.0",
    "nodemon": "^1.8.1",
    "once": "^1.4.0",
    "parallelshell": "^2.0.0",
    "prettier": "^1.5.3",
    "q": "^1.5.0",
    "selenium-download": "^2.0.10",
    "sinon": "^1.17.6",
    "sinon-chai": "^2.8.0",
    "source-map": "^0.5.6",
    "watchify": "^3.4.0",
    "wrappy": "^1.0.2"
  }
}