Yuneng Jiang 006d481025 [Fix] Remove neon CLI dependency and pin all JS dependencies ...

Remove @neondatabase/api-client and neonctl to address CVE-2026-25639
(axios supply chain vulnerability). Pin all JS dependencies to exact
versions across all package.json files to prevent future supply chain
attacks via semver range resolution.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-01 16:15:32 -07:00

..

.npmrc

chore: harden npm supply chain — pin overrides, enforce npm ci, add ignore-scripts (#24838)

2026-03-31 13:41:37 -07:00

fileMock.js

…

handle_add_model_submit_test.tsx

…

jest.config.js

…

jest.setup.js

…

package-lock.json

fix pkg lock

2025-11-22 11:52:57 -08:00

package.json

[Fix] Remove neon CLI dependency and pin all JS dependencies

2026-04-01 16:15:32 -07:00

tsconfig.json

…