[Snyk] Fix for 2 vulnerabilities

[rubybrowncoat]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Improper Handling of Unicode Encoding SNYK-JS-TAR-15038581	713
	Use of a Cryptographic Primitive with a Risky Implementation SNYK-JS-ELLIPTIC-14908844	708

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[Copilot]

Pull request overview

This PR attempts to fix two medium-severity security vulnerabilities (in the tar and elliptic packages) by upgrading npm and Nuxt dependencies. However, the proposed changes introduce critical breaking changes that will prevent the application from running.

Changes:

• Upgraded npm from ^6.11.3 to ^7.21.0
• Upgraded nuxt from ^2.9.2 to ^3.0.0

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Upgrading Nuxt from version 2.x to 3.0.0 is a major breaking change that will cause the application to fail. Nuxt 3 has a completely different API and requires significant refactoring:

• The nuxt.config.js uses Nuxt 2 syntax like 'mode: spa' which doesn't exist in Nuxt 3
• Several Nuxt modules in dependencies (nuxt-clipboard2, nuxt-fontawesome, @nuxtjs/dotenv) may not be compatible with Nuxt 3
• Nuxt 3 requires different directory structures and component patterns

This upgrade cannot be done as a simple version bump. Consider upgrading to a later patch version of Nuxt 2.x instead (e.g., 2.18.2 or later) to fix the security vulnerabilities without introducing breaking changes.

Suggested change

	"nuxt": "^3.0.0",
	"nuxt": "^2.18.2",

[Copilot]

The npm package should not be included as a runtime dependency. npm is the package manager itself and is installed globally on the system. Having it as a dependency is unnecessary and can cause conflicts or confusion. If the intention is to ensure a minimum npm version is used, this should be specified in the "engines" field of package.json instead.