Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 9 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
@@ -1,9 +1,12 @@
{
"name": "@metamask/vault-decryptor",
"version": "1.0.0",
"private": true,
"description": "Utility for decrypting MetaMask vault data",
"main": "index.js",
"files": [
"index.html",
"bundle.js"
],
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Main entry point file excluded from published package

Medium Severity

The files array specifies only index.html and bundle.js to be included in the published package, but the main field still references index.js, which won't be published. When consumers try to require('@metamask/vault-decryptor'), npm will attempt to load index.js and fail because that file doesn't exist in the published package. The main field should either be removed, updated to point to an included file, or index.js (and its dependencies in lib/ and app/) should be added to files.

Fix in Cursor Fix in Web

"scripts": {
"start": "beefy index.js:bundle.js --live --open",
"test": "jest && jest-it-up",
Expand Down Expand Up @@ -72,5 +75,9 @@
"engines": {
"node": ">=18.0.0"
},
"packageManager": "[email protected]"
"packageManager": "[email protected]",
"publishConfig": {
"access": "public",
"registry": "https://registry.npmjs.org/"
}
}
Loading