upgrade deps

README.md

@@ -39,8 +39,22 @@
 This project uses [SvelteKit](https://kit.svelte.dev/) with the static adapter
 and [Vite](https://vitejs.dev/),
 so the normal commands like `vite dev` work as expected.
-It also uses [`gro`](https://github.com/grogarden/gro)
-for additional things like deploying - see below for more.
+It also uses [Gro](https://github.com/grogarden/gro)
+for tasks like deploying and more.
+
+**⚠️ Important,** this template is designed for **public** open source projects.
+Its `package.json` has `"public": true` by default,
+which [tells Gro](https://github.com/grogarden/gro/blob/main/src/lib/docs/gro_plugin_sveltekit_frontend.md#well_known_package_json)
+to publish the `package.json` and a map of its `src/` directory
+to `static/.well-known/` during the build.
+This can leak sensitive information if you are not careful ⚠️
+To disable the feature:
+
+```diff
+// package.json
+- "public": true, // remove this to disable the public `.well-known` files
++ "private": true, // maybe add this to opt into disabling npm publish
+```
 
 > [Windows is not yet supported](https://github.com/fuz-dev/fuz_template/issues/4)
 > (we recommend [WSL](https://docs.microsoft.com/en-us/windows/wsl/about))

package.json

@@ -1,8 +1,8 @@
 {
   "name": "@fuz.dev/fuz_template",
-  "private": true,
   "description": "a static web app and Node library template with TypeScript, Svelte, SvelteKit, Vite, esbuild, Fuz, and Gro",
   "version": "0.0.1",
+  "public": true,
   "homepage": "https://template.fuz.dev/",
   "repository": "https://github.com/fuz-dev/fuz_template",
   "type": "module",
@@ -24,8 +24,8 @@
     "@fuz.dev/fuz": "^0.76.0",
     "@fuz.dev/fuz_contextmenu": "^0.5.0",
     "@fuz.dev/fuz_dialog": "^0.4.0",
-    "@fuz.dev/fuz_library": "^0.16.0",
-    "@grogarden/gro": "^0.97.0",
+    "@fuz.dev/fuz_library": "^0.16.1",
+    "@grogarden/gro": "^0.98.0",
     "@grogarden/util": "^0.15.2",
     "@sveltejs/adapter-static": "^2.0.3",
     "@sveltejs/kit": "^1.27.1",

src/lib/package.ts

@@ -4,10 +4,10 @@ import type {PackageJson} from '@grogarden/gro/package_json.js';
 
 export const package_json = {
 	name: '@fuz.dev/fuz_template',
-	private: true,
 	description:
 		'a static web app and Node library template with TypeScript, Svelte, SvelteKit, Vite, esbuild, Fuz, and Gro',
 	version: '0.0.1',
+	public: true,
 	homepage: 'https://template.fuz.dev/',
 	repository: 'https://github.com/fuz-dev/fuz_template',
 	type: 'module',
@@ -25,8 +25,8 @@ export const package_json = {
 		'@fuz.dev/fuz': '^0.76.0',
 		'@fuz.dev/fuz_contextmenu': '^0.5.0',
 		'@fuz.dev/fuz_dialog': '^0.4.0',
-		'@fuz.dev/fuz_library': '^0.16.0',
-		'@grogarden/gro': '^0.97.0',
+		'@fuz.dev/fuz_library': '^0.16.1',
+		'@grogarden/gro': '^0.98.0',
 		'@grogarden/util': '^0.15.2',
 		'@sveltejs/adapter-static': '^2.0.3',
 		'@sveltejs/kit': '^1.27.1',