fix: bump body-parser to 2.3.0 to patch DoS advisory

- google-play-scraper 10.1.2 -> 10.1.3
- override undici to 7.28.0 (multiple advisories)
- override qs to ^6.15.3 (arrayLimit bypass)
- replace unmaintained request with @cypress/request ^4.0.1,
  dropping vulnerable form-data 2.5.5 and uuid 3.4.0

.gitignore

@@ -9,7 +9,7 @@ npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 lerna-debug.log*
-.npm-debug.log*
+.pnpm-debug.log*
 
 # Diagnostic reports (https://nodejs.org/api/report.html)
 report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json

Dockerfile

@@ -1,6 +1,7 @@
 FROM node:24-alpine
+RUN corepack enable && corepack prepare pnpm@11.1.1 --activate
 WORKDIR /app
-COPY package.json package-lock.json ./
+COPY package.json pnpm-lock.yaml ./
-RUN npm ci
+RUN pnpm install --frozen-lockfile
 COPY . .
 CMD ["node", "server.js"]

package.json

@@ -1,7 +1,8 @@
 {
-  "name": "store-scraper-api",
+  "name": "store-scraper",
   "type": "module",
   "version": "1.0.0",
+  "packageManager": "pnpm@11.1.1",
   "description": "Host [google-play-scraper](https://github.com/facundoolano/google-play-scraper) and [app-store-scraper](https://github.com/facundoolano/app-store-scraper)",
   "main": "index.js",
   "scripts": {
@@ -9,14 +10,14 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/tiennm99/store-scraper-api.git"
+    "url": "git+https://github.com/tiennm99/store-scraper.git"
   },
   "author": "miti99",
   "license": "Apache-2.0",
   "bugs": {
-    "url": "https://github.com/tiennm99/store-scraper-api/issues"
+    "url": "https://github.com/tiennm99/store-scraper/issues"
   },
-  "homepage": "https://github.com/tiennm99/store-scraper-api#readme",
+  "homepage": "https://github.com/tiennm99/store-scraper#readme",
   "engines": {
     "node": ">=24"
   },
@@ -24,13 +25,5 @@
     "app-store-scraper": "^0.18.0",
     "express": "^5.2.0",
     "google-play-scraper": "^10.1.3"
-  },
-  "overrides": {
-    "qs": "^6.15.3",
-    "request": "npm:@cypress/request@^4.0.1",
-    "undici": "7.28.0"
-  },
-  "allowScripts": {
-    "es5-ext": true
   }
 }

pnpm-workspace.yaml

@@ -0,0 +1,7 @@
+allowBuilds:
+  es5-ext: true
+
+overrides:
+  qs: "^6.15.3"
+  request: "npm:@cypress/request@^4.0.1"
+  undici: "7.28.0"