mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-07-20 00:52:17 -05:00
kolaente
7be5026113
Adds a pnpm override for `tmp` in both the `frontend` and `desktop` workspaces to force the patched version (0.2.6). The previous transitive resolutions (`tmp@0.0.33` via external-editor in frontend, `tmp@0.2.3` via tmp-promise in desktop) are vulnerable to a path traversal via unsanitized prefix/postfix that enables directory escape. Addresses Dependabot alerts #234 (desktop) and #235 (frontend).
Web frontend for Vikunja
The todo app to organize your life.
This is the web frontend for Vikunja, written in Vue.js.
Take a look at our roadmap (hosted on Vikunja!) for a list of things we're currently working on!
For general information about the project, refer to the top-level readme of this repo.
Project setup
pnpm install
Development
Define backend server
You can develop the web front end against any accessible backend, including the demo at https://try.vikunja.io
In order to do so, you need to set the DEV_PROXY env variable. The recommended way to do so is to:
- Copy
.env.local.exampleas.env.local - Uncomment the
DEV_PROXYline - Set the backend url you want to use
In the end, it should look like DEV_PROXY=https://try.vikunja.io if you work against the online demo backend.
Start dev server (compiles and hot-reloads)
pnpm run dev
Compiles and minifies for production
pnpm run build
Lints and fixes files
pnpm run lint
License
This project is licensed under the AGPL-3.0-or-later license. See the LICENSE file for details.