Skip to content

[codex] patch Vite security advisory#1

Draft
Vedasheersh wants to merge 37 commits intotheproteinbot:mainfrom
Vedasheersh:codex/vite-security-fix
Draft

[codex] patch Vite security advisory#1
Vedasheersh wants to merge 37 commits intotheproteinbot:mainfrom
Vedasheersh:codex/vite-security-fix

Conversation

@Vedasheersh
Copy link
Copy Markdown

Summary

  • bump frontend vite from ^6.3.5 to ^6.4.2
  • refresh the frontend lockfile to install patched vite 6.4.2
  • pick up lockfile-only fixes for picomatch and brace-expansion

Why

GitHub flagged catpred/web/frontend/package-lock.json for CVE-2026-39363 / GHSA-p9ff-h696-f583, which affects Vite 6.0.0 through 6.4.1. This branch moves the frontend to the first patched 6.x release and clears the remaining frontend audit findings in the lockfile.

Impact

  • resolves the Vite Dependabot alert for the frontend dependency tree
  • keeps the change limited to frontend dependency metadata and lockfile updates
  • avoids pulling unrelated work from the current local feature branch

Validation

  • npm audit
  • npm run build

theproteinbot and others added 30 commits February 28, 2026 14:03
Harden inference API and add secure backend/deserialization architecture
…paration

Replace the 3-pill parameter selector with two top-level modes:
- Substrate kinetics (kcat/Km): per-entry multi-substrate inputs with
  primary marker — primary goes to Km, all joined for kcat
- Inhibition (Ki): single inhibitor SMILES input

Key changes:
- New SubstrateInputs component with radio primary selector
- ParameterSelector now shows mode pills + kcat/Km checkboxes
- usePrediction supports running multiple predictions in parallel
- ResultPanel displays grouped results per parameter
- Units render with Unicode superscripts (s⁻¹ instead of s^(-1))
- Header updated with Maranas Group link, field order: sequence first
- Sample data for both modes (glucokinase/glucose+ATP, coumaric acid/P11544)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Stop silently falling back to static/index.html when the Vue
dist build is missing — surface a clear 404 instead so deployment
issues are visible rather than hidden behind the old page.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Move "Developed in Maranas Group at Penn State" with link to
maranasgroup.com into the footer. Keep only Paper and GitHub
links in the header.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Add GoatCounter analytics script (privacy-friendly, no cookies)
and display visit count in the footer via GoatCounter's public
JSON API. Counter gracefully hides if the API is unreachable.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…trate-ki-separation

feat(web): multi-substrate input, Ki separation, and frontend improvements
…tion

Add www.catpred.com badge and Web App section highlighting the live
prediction tool. Document Vue 3 frontend location and dev/build
commands in the Web API section. Update citation from bioRxiv preprint
to published Nature Communications reference (2025, vol 16, art 2072).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
theproteinbot and others added 7 commits March 14, 2026 22:40
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Replace placeholder SMILES/sequence with the same human glucokinase
(GCK, UniProt P35557) + D-glucose example used on www.catpred.com.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
… section; remove favicon

- Fix 4-backtick code block closing to 3
- Fix git clone URL casing (catpred → CatPred)
- Add Fine-Tuning and Docker entries to Table of Contents
- Add Docker subsection under Local Installation
- Remove favicon SVG and its link tag from index.html

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…trate-ki-separation

docs(readme): add web app section and update citation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants