Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
"freeport:seed": "tsx scripts/seed-demo.ts"
},
"dependencies": {
"@moneydevkit/nextjs": "^0.16.0",
"@moneydevkit/nextjs": "^0.18.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check npm registry for `@moneydevkit/nextjs` version 0.18.0 and any security info

echo "=== Checking version 0.18.0 exists ==="
npm view `@moneydevkit/nextjs`@0.18.0 version

echo -e "\n=== Checking for security advisories ==="
npm audit --json --package-lock-only 2>/dev/null | jq '.vulnerabilities // "No vulnerabilities found in audit"'

echo -e "\n=== Checking latest version ==="
npm view `@moneydevkit/nextjs` version

echo -e "\n=== Checking peer dependencies for 0.18.0 ==="
npm view `@moneydevkit/nextjs`@0.18.0 peerDependencies

Repository: ATLBitLab/freeport

Length of output: 827


@moneydevkit/nextjs 0.18.0 bump: security check looks clean; still smoke-test payment runtime

  • @moneydevkit/nextjs@0.18.0 exists on npm and its peer deps align with Next/React (next '^15 || ^16', react '^18 || ^19', react-dom '^18 || ^19').
  • npm audit reports no known vulnerabilities.
  • Build success covers compile-time compatibility, but validate runtime payment flows (checkout create+redirect, useCheckoutSuccess, and withDeferredSettlement) to catch any behavioral/API contract changes.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@package.json` at line 16, Update runtime verification after bumping
"`@moneydevkit/nextjs`" to ^0.18.0 by performing a focused smoke test: install
dependencies and run the app, then exercise payment flows end-to-end — create a
checkout and confirm redirect behavior, verify client hooks/useCheckoutSuccess
return expected success state in post-checkout pages, and validate server/client
behavior of withDeferredSettlement (deferred settlement callbacks and webhooks)
against your payment sandbox; if any behavioral/API differences appear, pin or
adapt code paths referencing useCheckoutSuccess, withDeferredSettlement, and
checkout creation/redirect handling to match the new package's contract.

"@noble/hashes": "^2.2.0",
"@noble/secp256k1": "^3.1.0",
"@supabase/supabase-js": "^2.104.1",
Expand Down
Loading