package.json

{
  "name": "thicket",
  "version": "0.1.0",
  "description": "Dependency vulnerability scanner that tells you which CVEs actually reach your code.",
  "license": "ISC",
  "type": "module",
  "bin": {
    "thicket": "./bin/thicket.js"
  },
  "scripts": {
    "test": "node --test test/*.test.js",
    "build:web": "esbuild web/app.jsx --bundle --outdir=web/dist --loader:.jsx=jsx --minify && cp web/index.html web/styles.css web/dist/",
    "prepare": "npm run build:web",
    "dev": "npm run build:web && node bin/thicket.js"
  },
  "engines": {
    "node": ">=20"
  },
  "dependencies": {
    "better-sqlite3": "^12.2.0",
    "esbuild": "^0.25.9",
    "express": "^5.1.0",
    "open": "^10.2.0",
    "react": "^19.1.1",
    "react-dom": "^19.1.1"
  }
}