mirror of
https://github.com/jambonz/speech-utils.git
synced 2026-08-19 09:40:19 +00:00
Dave HortonandClaude Opus 5
7a9a3e2468
The Azure speech SDK was pinned to exactly 1.38.0 since the initial commit. It pulls in uuid <11.1.1, which carries GHSA-w5hq-g745-h8pq (missing buffer bounds check in v3/v5/v6 when buf is provided). The advisory covers Azure SDK 1.14.0-1.50.0; 1.51.0 clears it. Loosened the exact pin to a caret range so future patches come in without another PR. The SDK surface used here (SpeechConfig, SpeechSynthesizer, ResultReason, CancellationDetails, SpeechSynthesisOutputFormat) is unchanged in 1.51.0. Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
52 lines
1.4 KiB
JSON
52 lines
1.4 KiB
JSON
{
|
|
"name": "@jambonz/speech-utils",
|
|
"version": "1.0.12",
|
|
"description": "TTS-related speech utilities for jambonz",
|
|
"main": "index.js",
|
|
"author": "Dave Horton",
|
|
"directories": {
|
|
"lib": "lib",
|
|
"test": "test"
|
|
},
|
|
"scripts": {
|
|
"test": "NODE_ENV=test node test/ ",
|
|
"coverage": "nyc --reporter html --report-dir ./coverage npm run test",
|
|
"jslint": "eslint index.js lib",
|
|
"jslint:fix": "npm run jslint --fix",
|
|
"prepare": "husky"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/jambonz/speech-utils.git"
|
|
},
|
|
"license": "MIT",
|
|
"bugs": {
|
|
"url": "https://github.com/jambonz/speech-utils/issues"
|
|
},
|
|
"homepage": "https://github.com/jambonz/speech-utils#readme",
|
|
"dependencies": {
|
|
"23": "^0.0.0",
|
|
"@aws-sdk/client-polly": "^3.496.0",
|
|
"@aws-sdk/client-sts": "^3.496.0",
|
|
"@cartesia/cartesia-js": "^2.2.7",
|
|
"@google-cloud/text-to-speech": "^6.4.0",
|
|
"@grpc/grpc-js": "^1.9.14",
|
|
"@jambonz/realtimedb-helpers": "^0.8.7",
|
|
"bent": "^7.3.12",
|
|
"debug": "^4.3.4",
|
|
"google-protobuf": "^3.21.2",
|
|
"microsoft-cognitiveservices-speech-sdk": "^1.51.0",
|
|
"openai": "^4.98.0",
|
|
"undici": "^7.5.0"
|
|
},
|
|
"devDependencies": {
|
|
"config": "^4.2.0",
|
|
"eslint": "^9.3.0",
|
|
"eslint-plugin-promise": "^6.2.0",
|
|
"husky": "^9.0.11",
|
|
"nyc": "^15.1.0",
|
|
"pino": "^9.1.0",
|
|
"tape": "^5.7.5"
|
|
}
|
|
}
|