raffiawallcoverings: declare helmet + dotenv (undeclared deps would crash prod on npm ci --production)
server.js hard-requires helmet but package.json declared only express; a clean npm ci --production prunes to express-only and the app crash-loops (MODULE_NOT_FOUND helmet, 502) — same latent bug that took linenwallpaper down. Declare both so a clean install is safe. Local only; not deployed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Files touched
M package-lock.jsonM package.json
Diff
commit f87c754e41fc4cb21b735552b20252e74d672ab4
Author: Steve <steve@designerwallcoverings.com>
Date: Mon Sep 14 15:30:07 2026 -0700
raffiawallcoverings: declare helmet + dotenv (undeclared deps would crash prod on npm ci --production)
server.js hard-requires helmet but package.json declared only express; a
clean npm ci --production prunes to express-only and the app crash-loops
(MODULE_NOT_FOUND helmet, 502) — same latent bug that took linenwallpaper
down. Declare both so a clean install is safe. Local only; not deployed.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
package-lock.json | 15 +++++++++------
package.json | 6 ++++--
2 files changed, 13 insertions(+), 8 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index a64938d..2d7bda3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,16 +1,16 @@
{
"name": "raffiawallcoverings",
- "version": "0.1.1",
+ "version": "0.1.0",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "raffiawallcoverings",
- "version": "0.1.1",
+ "version": "0.1.0",
"dependencies": {
"dotenv": "^17.4.2",
"express": "^4.21.0",
- "helmet": "^8.1.0"
+ "helmet": "^8.3.0"
}
},
"node_modules/accepts": {
@@ -424,12 +424,15 @@
}
},
"node_modules/helmet": {
- "version": "8.1.0",
- "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
- "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
+ "version": "8.3.0",
+ "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.3.0.tgz",
+ "integrity": "sha512-Qgpiaws3Sm30Av8Eah6sjMCZZwjlBu+E68rhpCWBshY1lb09HtLwj5GviX0OyQIn+ulUS0iX0AxN5n3tLZzz1w==",
"license": "MIT",
"engines": {
"node": ">=18.0.0"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/EvanHahn"
}
},
"node_modules/http-errors": {
diff --git a/package.json b/package.json
index 6449c4d..f6315e0 100644
--- a/package.json
+++ b/package.json
@@ -7,6 +7,8 @@
"start": "node server.js"
},
"dependencies": {
- "express": "^4.21.0"
+ "dotenv": "^17.4.2",
+ "express": "^4.21.0",
+ "helmet": "^8.3.0"
}
-}
\ No newline at end of file
+}