[ChiragAgg5k]

What

Upgrades the starter to Nuxt 4 to fix open Dependabot alerts, and applies the Nuxt 4 migration. Supersedes #7, which only bumps the version and doesn't move the project to the Nuxt 4 layout.

Fixed advisories

• nuxt GHSA-xfq5-w38q-pc2x, GHSA-jjm6-p2m9-9w4x and GHSA-vjh5-4x84-xrqp: nuxt ^3.13.0 → ^4.6.2 (lockfile resolves 4.6.3). Nuxt 3.x has no fix.
• @nuxt/nitro-server GHSA-vjh5-4x84-xrqp: resolves to 4.6.3.
• serialize-javascript GHSA-m5mm-p8h7-m29v (transitive through nitropack → @rollup/plugin-terser): resolves to 7.1.4, so no overrides entry is needed.

Not addressed: deepmerge GHSA-gcqx-w48m-w2h4 has no upstream fix.

Nuxt 4 migration

• Moved app.vue, assets/ and lib/ into app/ (the new srcDir), so the ~/lib/appwrite and @/assets/app.css aliases keep working. public/ stays at the root.
• Replaced the root tsconfig.json with Nuxt 4 project references and removed server/tsconfig.json, which Nuxt 4 no longer uses.
• Bumped compatibilityDate.

Verification

• npm install and npm run build pass.
• npm run dev serves the starter page with no errors.
• package-lock.json contains no vulnerable nuxt, @nuxt/nitro-server or serialize-javascript versions.

[hansi-codes]

🟢 Tier S · Ready to merge

The locked npm install and production build both complete successfully, and the migrated layout and TypeScript references match the project’s usage.

Upgrades the starter from Nuxt 3 to Nuxt 4 and migrates its application files into Nuxt 4’s app/ source directory. Updates the Nuxt compatibility date, dependency lockfile, and root TypeScript project references, while removing the obsolete server TypeScript config.

1 of 4 changed files was too large to include in full.

Verdict	New comments	Fixed	Still open
💬 Commented	0	0	0

Note

Part of the diff was too large to review, so Hansi did not approve.

📂 Walkthrough · 8

File	Change
nuxt.config.ts	Advances the Nuxt compatibility date.
package.json	Updates the Nuxt dependency to the Nuxt 4 range.
package-lock.json	Resolves the Nuxt 4 dependency tree.
tsconfig.json	Switches to Nuxt 4 generated project references.
app/app.vue	Moves the root application component into Nuxt 4’s app directory.
app/assets/app.css	Moves the stylesheet into the app directory.
app/lib/appwrite.js	Moves the Appwrite helper into the app directory.
server/tsconfig.json	Removes the obsolete server TypeScript configuration.

---

_{Reviewed b15386d · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟢 Tier S · Looks good to merge. Summary