{ "candidate_rules": [], "challenge": { "attack_surface": [ "dependency-supply-chain" ], "control_type": "positive", "difficulty": "hard", "expected_decision": "BLOCK", "oracle_ids": [ "LF-ORACLE-DEPX-0003" ], "related_cases": [], "severity": "medium", "techniques": [ "dependency" ], "transformations": [] }, "corpus_id": "LF-CH-DEPX-0003", "description": "Dependency direct url invalid.", "expected_rules": [ "LF-DEP-DIRECT-URL" ], "generator": "challenges.generate_challenge", "ground_truth": "synthetic-generated", "must_not_rules": [], "repo_name": "dependency-direct-url-invalid", "repo_type": "model", "safe_fixture": true, "safety": "inert/canary-only", "schema": 1, "validation": { "kind": "verify-package", "target": "." } }