jutewallpaper: declare helmet + dotenv (undeclared deps would crash prod on npm ci --production)

a11b72220e4ce221789502ffc8fe7860cffdf4cf · 2026-09-14 15:30:06 -0700 · Steve

server.js hard-requires helmet but package.json declared only express; a
clean npm ci --production prunes to express-only and the app crash-loops
(MODULE_NOT_FOUND helmet, 502) — same latent bug that took linenwallpaper
down. Declare both so a clean install is safe. Local only; not deployed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

M package-lock.json
M package.json

Diff

commit a11b72220e4ce221789502ffc8fe7860cffdf4cf
Author: Steve <steve@designerwallcoverings.com>
Date:   Mon Sep 14 15:30:06 2026 -0700

    jutewallpaper: declare helmet + dotenv (undeclared deps would crash prod on npm ci --production)
    
    server.js hard-requires helmet but package.json declared only express; a
    clean npm ci --production prunes to express-only and the app crash-loops
    (MODULE_NOT_FOUND helmet, 502) — same latent bug that took linenwallpaper
    down. Declare both so a clean install is safe. Local only; not deployed.
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 package-lock.json | 15 +++++++++------
 package.json      |  6 ++++--
 2 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index ad02576..e9e8108 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,16 +1,16 @@
 {
   "name": "jutewallpaper",
-  "version": "0.1.1",
+  "version": "0.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "jutewallpaper",
-      "version": "0.1.1",
+      "version": "0.1.0",
       "dependencies": {
         "dotenv": "^17.4.2",
         "express": "^4.21.0",
-        "helmet": "^8.1.0"
+        "helmet": "^8.3.0"
       }
     },
     "node_modules/accepts": {
@@ -424,12 +424,15 @@
       }
     },
     "node_modules/helmet": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
-      "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.3.0.tgz",
+      "integrity": "sha512-Qgpiaws3Sm30Av8Eah6sjMCZZwjlBu+E68rhpCWBshY1lb09HtLwj5GviX0OyQIn+ulUS0iX0AxN5n3tLZzz1w==",
       "license": "MIT",
       "engines": {
         "node": ">=18.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/EvanHahn"
       }
     },
     "node_modules/http-errors": {
diff --git a/package.json b/package.json
index d07aaea..3639ae6 100644
--- a/package.json
+++ b/package.json
@@ -7,6 +7,8 @@
     "start": "node server.js"
   },
   "dependencies": {
-    "express": "^4.21.0"
+    "dotenv": "^17.4.2",
+    "express": "^4.21.0",
+    "helmet": "^8.3.0"
   }
-}
\ No newline at end of file
+}

← 07fa1e9 Add clean /privacy route (AdSense URL consistency) · back to Jutewallpaper · hero: remove hero-4grid.js collision, R4 alternating block i 18ccd66 →