chore: secure frontend build toolchain

2026-07-14 11:49:12 +02:00
parent d7eadbc6ca
commit 68ee228f1b
6 changed files with 315 additions and 157 deletions
@@ -342,7 +342,7 @@ Raster metadata and raster ops may remain unavailable when backend raster stack

 ### Prerequisites

- Node.js 18+
+- Node.js 20.19+ or 22.12+

 ### Install dependencies

@@ -362,8 +362,13 @@ npm run start
 ```bash
 npm run typecheck
 npm run build
+npm audit
 ```

+The frontend uses Vite 7 and React plugin 5. Production remains a static nginx
+build; Vite is only the local/build toolchain. `npm audit` should report zero
+known vulnerabilities before a release build is accepted.
+
 ### Dockerized frontend

 ```bash