Possible fix(deps): 9 vulnerable dependencies in pnpm-lock.yaml

[begininvoke]

Spotted what might be an issue in pnpm-lock.yaml around line 1.

The bigint-buffer package (v1.1.5) contains a buffer overflow vulnerability in its toBigIntLE() function. Improper bounds checking during byte-to-bigint conversion allows attackers to supply crafted inputs that corrupt heap memory, resulting in a high-severity Denial of Service (application crash). Since no fixed upstream version exists, immediate removal and migration to secure native alternatives is required.

Something like this might fix it:

Remove the vulnerable package from your dependencies and migrate to native Node.js BigInt/Buffer operations.
```diff
--- a/package.json
+++ b/package.json
@@ -10,7 +10,6 @@
   "dependencies": {
-    "bigint-buffer": "1.1.5"
+
   }
```
Run `pnpm install` to update pnpm-lock.yaml. Replace existing usages of `.toBigIntLE()` with native buffer readers:
```javascript
// Legacy:
// const num = buffer.toBigIntLE();
// Native:
const num = buffer.readBigUInt64LE(0); // Adjust offset/length to match your expected byte width
```

For reference: rule CVE-2025-3194. Rated high.

The suggested change is untested against this project, so please read it before applying it.

---

Found with automated scanning (RedGem) and reviewed before opening. If it is not useful, closing it is completely fine.