Approved Package Registry Every runtime and development dependency must appear in this registry before use, per CLAUDE.md § Dependency Registry. New packages require an entry with a justification and review sign-off.
Runtime Dependencies Package Version Purpose Status express ^4.21.0 HTTP framework (driving adapter layer) Approved @prisma/client ^5.20.0 Generated type-safe database client Approved prisma ^5.20.0 Schema, migrations, client generator (CLI) Approved argon2 ^0.41.1 Password hashing (argon2id) Approved jsonwebtoken ^9.0.2 JWT signing and verification Approved zod ^3.23.8 Request validation and schema parsing Approved slugify ^1.6.6 Deterministic article slug generation Approved cors ^2.8.5 Cross-origin resource sharing middleware Approved dotenv ^16.4.5 Environment variable loading Approved express-async-errors ^3.1.1 Async error propagation to error middleware Approved
Development Dependencies Package Version Purpose Status typescript ^5.6.2 TypeScript compiler Approved ts-node-dev ^2.0.0 Dev server with reload Approved jest ^29.7.0 Test runner Approved ts-jest ^29.2.5 TypeScript transform for Jest Approved supertest ^7.0.0 HTTP integration testing Approved @types/* latest Type definitions Approved eslint ^8.57.1 Linting Approved @typescript-eslint/* ^8.8.0 TypeScript ESLint plugin/parser Approved husky ^9.1.6 Git hooks Approved @commitlint/* ^19.5.0 Conventional commit enforcement Approved @stryker-mutator/* ^8.5.0 Mutation testing gate Approved