Fixes vulnerabilities in package-lock.json files, and introduces git commit pre-hooks to sanitize package-lock files.

Author: prabhakk-mw

.githooks/pre-commit

@@ -0,0 +1,37 @@
+#!/bin/sh
+# Copyright 2025 The MathWorks, Inc.
+# Pre-commit hook to run all scripts in the scripts folder
+# Called by "git commit" with no arguments.
+
+# Path to the scripts directory
+# Get the directory where this script is located
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+SCRIPTS_DIR="$SCRIPT_DIR/scripts"
+
+# Check if the scripts directory exists
+if [ ! -d "$SCRIPTS_DIR" ]; then
+	echo "Error: Scripts directory not found at $SCRIPTS_DIR"
+	exit 1
+fi
+
+echo "Running pre-commit scripts from $SCRIPTS_DIR"
+
+# Find all executable scripts in the scripts directory and sort them alphabetically
+for script in $(find "$SCRIPTS_DIR" -type f -executable | sort); do
+	script_name=$(basename "$script")
+	echo "Running $script_name..."
+	
+    # Execute the script
+    sh "$script"
+    
+    # Check the exit code
+    if [ $? -ne 0 ]; then
+        echo "Error: $script_name failed. Commit aborted."
+        exit 1
+    fi
+    
+    echo "$script_name completed successfully."
+done
+
+echo "All pre-commit scripts completed successfully."
+exit 0

.githooks/scripts/sanitize-npm-registry.sh

@@ -0,0 +1,32 @@
+#!/bin/bash
+# Copyright 2025 The MathWorks, Inc.
+# Pre-commit hook to replace MathWorks NPM registry URLs with public NPM registry
+
+# Find all package.json, .npmrc, and other relevant files
+echo "Executing pre-commit hook: sanitize-npm-registry"
+FILES=$( git diff --cached --name-only --diff-filter=ACM | grep -E '(.*.json)')
+
+if [ -z "$FILES" ]; then
+    exit 0
+fi
+
+# Replace the MathWorks NPM registry URL with the public NPM registry
+for FILE in $FILES; do
+    # Skip if file doesn't exist (it may have been deleted)
+    [ -f "$FILE" ] || continue
+
+    echo "Sanitizing NPM registry URL in $FILE"
+
+    # Replace the URL in the file
+    sed -i.bak 's|https://.*/artifactory/api/npm/npm-repos/|https://registry.npmjs.org/|g' "$FILE"
+
+    # Remove backup file
+    rm -f "${FILE}.bak"
+
+    # Stage the modified file
+    git add "$FILE"
+
+    echo "Sanitization complete for $FILE"
+done
+
+exit 0

.gitignore

@@ -1,6 +1,9 @@
 *.egg-info
 .eggs
 __pycache__
+__uvcache__
+.ipynb_checkpoints/
+*.ipynb
 build
 dist
 .venv