Dependabot reports 12 open alerts in the react-admin-dashboard template across its frontend and backend lockfiles.
Affected manifests
react-admin-dashboard/frontend/package-lock.json — 8 alertsreact-admin-dashboard/backend/package-lock.json — 4 alerts
Notable packages
Frontend (build chain): vite (high), rollup (high), esbuild, postcss, react-router, @babel/core.
Backend: fast-uri (high — patched 3.1.1/3.1.2, typically pulled via Fastify/ajv), lodash (high — patched 4.18.0).
Proposed fix
cd react-admin-dashboard/frontend && npm audit fix && npm update
cd ../backend && npm audit fix && npm update
Commit both regenerated package-lock.json files. The fast-uri fix usually rides along with a Fastify/ajv bump — verify the backend still builds/starts after.
Priority
Medium.
Dependabot reports 12 open alerts in the
react-admin-dashboardtemplate across its frontend and backend lockfiles.Affected manifests
react-admin-dashboard/frontend/package-lock.json— 8 alertsreact-admin-dashboard/backend/package-lock.json— 4 alertsNotable packages
Frontend (build chain):
vite(high),rollup(high),esbuild,postcss,react-router,@babel/core.Backend:
fast-uri(high — patched 3.1.1/3.1.2, typically pulled via Fastify/ajv),lodash(high — patched 4.18.0).Proposed fix
Commit both regenerated
package-lock.jsonfiles. Thefast-urifix usually rides along with a Fastify/ajv bump — verify the backend still builds/starts after.Priority
Medium.