package.json

{
  "name": "dynamic-field-kit",
  "private": true,
  "workspaces": [
    "packages/*",
    "smoke"
  ],
  "scripts": {
    "build": "npm run build --workspace=@dynamic-field-kit/core && npm run build --workspaces --if-present",
    "build:changed": "node scripts/build-changed.js",
    "dev": "npm run dev --workspaces",
    "test": "npm run test --workspaces --if-present",
    "test:scripts": "vitest run",
    "lint": "eslint packages/core/src packages/react/src packages/vue/src packages/angular/src scripts",
    "lint:cross-framework": "node scripts/check-cross-framework-imports.js",
    "verify-framework-deps": "node scripts/verify-framework-deps.js",
    "lint:fix": "eslint . --fix",
    "format-check": "prettier --check .",
    "typecheck": "npm run typecheck --workspaces --if-present",
    "format": "prettier --write .",
    "prepare": "husky && git config commit.template .git-commit-template.txt || true",
    "changeset": "changeset",
    "changeset:auto": "node scripts/create-changeset.js",
    "version-packages": "changeset version",
    "release": "changeset publish"
  },
  "//": "root vitest is the hoisted peer target for @vitest/coverage-v8 - do not remove, it looks unused but breaks --coverage repo-wide",
  "devDependencies": {
    "@changesets/cli": "^2.31.1",
    "@commitlint/cli": "^21.2.1",
    "@commitlint/config-conventional": "^21.2.0",
    "@eslint/js": "^9.39.5",
    "@typescript-eslint/parser": "^8.67.0",
    "eslint": "^9.39.5",
    "eslint-config-prettier": "^10.1.8",
    "eslint-plugin-import": "^2.32.0",
    "globals": "^16.5.0",
    "husky": "^9.1.7",
    "lint-staged": "^17.2.0",
    "prettier": "^2.8.8",
    "tsup": "^8.0.1",
    "typescript": "~5.5.0",
    "typescript-eslint": "^8.67.0",
    "vitest": "^1.6.0"
  },
  "//dependencies": "the root is private and ships nothing, so it declares no runtime dependencies. react/react-dom/vue/@types/react used to sit here for the packages to borrow; each package now declares its own (enforced by scripts/verify-framework-deps.js), which is also what keeps `npm audit --omit=dev` from failing on advisories in a build-time tree, e.g. vue -> @vue/compiler-sfc -> postcss -> nanoid.",
  "dependencies": {
    "@dynamic-field-kit/core": "workspace:*",
    "@dynamic-field-kit/react": "workspace:*",
    "@dynamic-field-kit/vue": "workspace:*"
  },
  "//overrides": "nanoid <3.3.18 is GHSA-2v37-7h3g-55p8. It reaches us only through vue -> @vue/compiler-sfc -> postcss (build-time), but pin it forward so the toolchain we actually run is patched, not merely excluded from the audit.",
  "overrides": {
    "nanoid": "^3.3.18"
  },
  "//lint-staged": "globs must stay a superset of what `prettier --check .` sees, or a file can pass pre-commit and fail CI format-check. eslint only runs on the extensions the lint script targets. --no-warn-ignored keeps eslint 9 quiet when a staged file (an example app, say) is covered by the flat config ignores.",
  "lint-staged": {
    "*.{ts,tsx,js,jsx}": [
      "prettier --write",
      "eslint --fix --no-warn-ignored"
    ],
    "*.{cjs,mjs,json,md,yml,yaml,css,scss,html}": [
      "prettier --write"
    ]
  }
}