leonarski_f
ef52dac2ee
Build Packages / build:rpm (rocky8_nocuda) (push) Successful in 11m34s
Build Packages / build:rpm (rocky9_nocuda) (push) Successful in 12m52s
Build Packages / build:rpm (ubuntu2204_nocuda) (push) Successful in 12m54s
Build Packages / build:rpm (ubuntu2404_nocuda) (push) Successful in 9m48s
Build Packages / build:rpm (rocky8_sls9) (push) Successful in 12m50s
Build Packages / build:rpm (rocky9_sls9) (push) Successful in 13m54s
Build Packages / build:rpm (rocky8) (push) Successful in 12m46s
Build Packages / build:rpm (rocky9) (push) Successful in 11m56s
Build Packages / build:rpm (ubuntu2204) (push) Successful in 10m34s
Build Packages / build:rpm (ubuntu2404) (push) Successful in 9m54s
Build Packages / DIALS test (push) Successful in 13m1s
Build Packages / XDS test (durin plugin) (push) Successful in 8m32s
Build Packages / XDS test (JFJoch plugin) (push) Successful in 8m44s
Build Packages / XDS test (neggia plugin) (push) Successful in 8m3s
Build Packages / Generate python client (push) Successful in 13s
Build Packages / Build documentation (push) Successful in 47s
Build Packages / Create release (push) Skipped
Build Packages / Unit tests (push) Successful in 43m38s
* jfjoch_broker: For PSI EIGER detector allow to disable individual half-modules by putting empty hostname Reviewed-on: #61 Co-authored-by: Filip Leonarski <filip.leonarski@psi.ch> Co-committed-by: Filip Leonarski <filip.leonarski@psi.ch>
62 lines
2.1 KiB
Markdown
62 lines
2.1 KiB
Markdown
# Jungfraujoch Frontend
|
|
|
|
## Building
|
|
|
|
To build web interface:
|
|
```
|
|
cd frontend_ui
|
|
npm install
|
|
npm run openapi
|
|
npm run build
|
|
```
|
|
|
|
## Available Scripts
|
|
|
|
In the project directory, you can run:
|
|
|
|
### `npm start`
|
|
|
|
Runs the app in the development mode.<br />
|
|
|
|
The page will reload if you make edits.<br />
|
|
You will also see any lint errors in the console.
|
|
|
|
### `npm test`
|
|
|
|
Launches the test runner in the interactive watch mode.<br />
|
|
See the section about [running tests](https://facebook.github.io/create-react-app/docs/running-tests) for more information.
|
|
|
|
### `npm run build`
|
|
|
|
Builds the app for production to the `dist` folder.<br />
|
|
It correctly bundles React in production mode and optimizes the build for the best performance.
|
|
|
|
The build is minified and the filenames include the hashes.<br />
|
|
Your app is ready to be deployed!
|
|
|
|
### `npm run openapi`
|
|
|
|
## `npm audit` findings
|
|
|
|
`npm audit` currently reports 17 advisories (3 high, 13 moderate, 1 low). All of
|
|
them live in **build-time tooling** and never reach the production bundle
|
|
shipped to the browser. Summary of the chains:
|
|
|
|
| Source dep | Vulnerable transitives | When it runs |
|
|
|---|---|---|
|
|
| `@redocly/cli` | `@opentelemetry/*`, `dompurify` (via `redoc`), `ws` (via `simple-websocket`), `js-yaml`, `protobufjs`, `@babel/core` | `npm run redocly` / `redocly4broker` — static OpenAPI HTML generation |
|
|
| `vite` | `esbuild@0.27.x` | Dev server and dep pre-bundling. Production build uses Rollup. |
|
|
| `vite-plugin-svgr` | `@babel/core`, `js-yaml` (via `cosmiconfig`) | Vite build plugin |
|
|
| `openapi-typescript-codegen` | `js-yaml` | `npm run openapi` — TS client generation |
|
|
|
|
Notes on the high-severity items:
|
|
- `esbuild` GHSA-gv7w-rqvm-qjhr is a Deno-specific RCE via `NPM_CONFIG_REGISTRY`;
|
|
GHSA-g7r4-m6w7-qqqr is an arbitrary-file-read in the **dev server on Windows**.
|
|
Neither applies to a Linux build of the production bundle.
|
|
- `ws` GHSA-96hv-2xvq-fx4p only matters when `simple-websocket` opens a socket,
|
|
which happens during docs generation, not at runtime.
|
|
|
|
`npm audit fix` cannot resolve any of these without downgrading
|
|
`@redocly/cli` (no real fix) or jumping `vite` to a major that switches the
|
|
bundler to Rolldown.
|