SCANNPM-123 Use public npm urls in package-lock.json

[vdiez]

No description provided.

[hashicorp-vault-sonar-prod]

SCANNPM-123

[sonarqubecloud]

SonarQube reviewer guide

Summary: Migrates package registry from repox.jfrog.io to registry.npmjs.org and removes npm workflow config

Review Focus:

• Verify all package registry URLs have been completely updated (thousands of lines changed)
• Ensure no hardcoded references to the old JFrog registry remain
• Check for any package integrity/hash issues that may arise from registry change
• Confirm the removal of .github/workflows/.npmrc won't break CI/CD authentication flows

Start review at: .github/workflows/.npmrc (deleted file). Important to verify this authentication config removal is intentional and that CI/CD pipelines have alternative auth mechanisms in place, as this could break automated npm operations.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud