Realistic Juice Shop

Working Vue 3 + Hono + Prisma demo modeled loosely on OWASP Juice Shop. Built so that every direct dependency in frontend/package.json and backend/package.json resolves to a version published within the last 14 days — useful target for supply-chain scanners that flag "very recently published" deps.

See recent-deps-report.md for the full pin-by-pin manifest with publish timestamps, npm verification URLs, and lockfile line numbers. See CLAUDE.md for setup, architecture, and Prisma 7 caveats.

Quick start

Requires Node 20+.

# backend
cd backend && cp .env.example .env && npm install
npm run db:migrate && npm run db:seed && npm run dev   # :3000

# frontend (new shell)
cd frontend && cp .env.example .env && npm install
npm run dev                                            # :5173

Demo credentials: customer@juice.demo / customer1234.