Dependency Analysis & Technology Inventory
This document analyzes the complete dependency graph of veridex-hitech-web-application. Rather than generic package descriptions, this inventory documents the exact role, integration points, and operational rationale for each significant package in this codebase.
1. Core Framework & Runtime
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
next | 15.5.12 | Core application framework. Provides App Router architecture, Server Components (RSC), Server Actions (serverActions.bodySizeLimit: "8mb"), standalone Docker output (output: "standalone"), and Edge Middleware. |
react | 19.1.0 | UI library. Powers asynchronous transitions, useActionState for form handlers, concurrent rendering, and server/client boundary separation. |
react-dom | 19.1.0 | DOM renderer for React 19, enabling client hydration and document head metadata injection. |
typescript | ^5 | Strict type system enforcing type safety across Mongoose schemas, Server Actions, API contracts, and internationalization dictionaries. |
2. Database & Data Modeling
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
mongoose | ^9.6.1 | Object Document Modeling (ODM) for MongoDB. Configured with a cached global connection singleton (global.mongoose), strict schema definitions, compound indexes for lead querying, and automatic TTL document expiration for rate limits and active visitor heartbeats. |
3. Authentication & Security
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
next-auth | ^5.0.0-beta.31 | NextAuth.js v5 (Auth.js). Configured with Credentials provider and JWT session strategy. Injects user ID, role (super_admin, admin, user), email verification status, and custom session expiration (24h vs. 14-day Remember Me) into cryptographically signed session cookies. |
bcryptjs | ^3.0.3 | Pure JavaScript implementation of bcrypt. Hashes user account passwords on registration and verifies passwords on sign-in and OpenAPI Swagger password challenge checks. |
react-google-recaptcha | ^3.1.0 | Client component rendering the Google reCAPTCHA v2 interactive checkbox challenge as a fallback when automated v3 invisible scoring yields an ambiguous score. |
4. Internationalization & Routing
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
next-intl | ^4.8.3 | Localization framework. Manages bilingual routing (/en, /es), browser Accept-Language negotiation in middleware, dynamic hreflang meta generation, and type-safe loading of 35+ localized JSON dictionaries per language. |
5. Rich Text Editorial CMS & Mass Email Suite
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
@tiptap/react | ^3.31.3 | Headless, extensible WYSIWYG editor framework. Powers both the Admin Blog Editor (blog-editor.tsx) and the Mass Email Composer (bulk-email-tab.tsx). |
@tiptap/starter-kit | ^3.31.3 | Bundles essential rich-text extensions: headings, blockquotes, bold, italic, bullet lists, ordered lists, and horizontal rules. |
@tiptap/extension-image | ^3.31.3 | Handles inline image embedding via toolbar upload, drag-and-drop, URL pasting, and clipboard paste. |
@tiptap/extension-link | ^3.31.3 | Autolinks URLs and formats hyperlinked anchor tags with target and rel attributes. |
@tiptap/extension-table | ^3.31.3 | Enables structured multi-column table insertion in blog posts. Combined with table-row, table-header, and table-cell. |
6. Styling, Design System & Animation
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
tailwindcss | ^4 | Utility-first CSS framework version 4. Provides modern CSS variables, streamlined compilation, and custom theme tokens (deep slate gradients, vivid orange accents). |
@tailwindcss/postcss | ^4 | PostCSS plugin integrating Tailwind v4 directly with Next.js compilation. |
@tailwindcss/typography | ^0.5.20 | Provides the prose utility classes for styling rich HTML output rendered by Tiptap in blog articles and legal disclosures. |
class-variance-authority | ^0.7.1 | CVA library for defining structured, type-safe variant classes for UI components (Button, badges, form controls). |
clsx & tailwind-merge | ^2.1.1 / ^3.5.0 | Utilities combined in src/lib/utils.ts (cn()) to dynamically merge class names and resolve conflicting Tailwind utility declarations. |
lucide-react | ^0.577.0 | Comprehensive vector icon set used across navigation bars, admin dashboards, portal tabs, and coverage product cards. |
@base-ui/react | ^1.3.0 | Unstyled, accessible component primitives powering dropdowns, popovers, and dialogs. |
@lottiefiles/dotlottie-react | ^0.19.0 | High-performance player for rendering vector Lottie animations in the welcome loading sequence and confirmation cards. |
tw-animate-css | ^1.4.0 | Animation helper package adding curated CSS keyframe transitions to Tailwind. |
7. Telephony, Geolocation & Field Marketing
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
@ringcentral/sdk | ^5.0.11 | Telephony SDK integrated for scheduling customer phone callbacks, validating commercial agency lines, and triggering automated agent dialing. |
geoip-lite | ^2.0.3 | High-speed local binary database resolving client IP addresses to country and US state codes without WAN network latency. Traced into standalone Docker builds via outputFileTracingIncludes in next.config.ts. |
countries-and-timezones | ^3.10.0 | Resolves country identifiers and timezones for accurate scheduling of callback time slots. |
qrcode | ^1.5.4 | Generates dynamic data-URI QR codes for field marketing event campaigns (/e/:slug) and user referral links. |
react-easy-crop | ^6.2.3 | Interactive canvas cropping tool enabling users to adjust, zoom, and crop their profile picture to a 1:1 aspect ratio before uploading. |
react-hot-toast | ^2.6.0 | Lightweight toast notification library for displaying non-blocking success alerts, form errors, and rate-limit warnings. |
8. Validation & Operational Logging
| Package | Version | Architectural Role & Implementation Details |
|---|---|---|
zod | ^4.3.6 | TypeScript-first schema declaration and validation library. Enforces structure and sanitization across Server Actions, API routes, and environment variables (src/lib/env.ts). |
zod-form-data | ^3.0.1 | Extension parsing and validating native FormData payloads passed to Next.js Server Actions. |
winston | ^3.19.0 | Enterprise logging library providing structured JSON output, log rotation, and severity levels for production telemetry. |
9. Development & Operational Tooling
| Package | Version | Operational Purpose |
|---|---|---|
tsx | ^4.22.3 | TypeScript execution engine used to run operations scripts with Node --env-file flags (seed-super-admin.ts, seed-admins.ts, update-admin-credentials.ts). |
eslint / eslint-config-next | ^9 / 15.5.12 | Next.js and TypeScript linting enforcement. |
husky / lint-staged | ^9.1.7 / ^16.4.0 | Git pre-commit hooks enforcing automated ESLint fixes and Prettier code formatting before commits are finalized. |
prettier | ^3.8.1 | Code formatting engine paired with prettier-plugin-tailwindcss to maintain uniform utility class ordering. |