mirror of
https://github.com/tiennm99/litellm.git
synced 2026-06-17 20:48:32 +00:00
Yuneng Jiang
006d481025
Remove @neondatabase/api-client and neonctl to address CVE-2026-25639 (axios supply chain vulnerability). Pin all JS dependencies to exact versions across all package.json files to prevent future supply chain attacks via semver range resolution. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
21 lines
472 B
JSON
21 lines
472 B
JSON
{
|
|
"dependencies": {
|
|
"prism-react-renderer": "2.4.1",
|
|
"prisma": "5.17.0",
|
|
"react-copy-to-clipboard": "5.1.0"
|
|
},
|
|
"devDependencies": {
|
|
"@testing-library/jest-dom": "6.8.0",
|
|
"@testing-library/react": "14.3.1",
|
|
"@types/react-copy-to-clipboard": "5.0.7",
|
|
"jest": "29.7.0"
|
|
},
|
|
"overrides": {
|
|
"glob": "13.0.0",
|
|
"minimatch": "10.1.1",
|
|
"@isaacs/brace-expansion": "5.0.0",
|
|
"@babel/traverse": "7.28.5",
|
|
"braces": "3.0.3"
|
|
}
|
|
}
|