| { | |
| "candidate_rules": [], | |
| "corpus_id": "LF-CORPUS-DEP-0001", | |
| "description": "Mixed Python/npm dependency manifests exercising alternate indexes, URLs, missing includes, insecure transport, local paths, path escapes, install hooks and VCS references.", | |
| "expected_rules": [ | |
| "LF-DEP-ALT-INDEX", | |
| "LF-DEP-DIRECT-URL", | |
| "LF-DEP-INCLUDE-MISSING", | |
| "LF-DEP-INSECURE-TRANSPORT", | |
| "LF-DEP-BUILD-BACKEND", | |
| "LF-DEP-INSTALL-HOOK", | |
| "LF-DEP-LOCAL-PATH", | |
| "LF-DEP-PATH-ESCAPE", | |
| "LF-DEP-NPM-INSTALL-HOOK", | |
| "LF-DEP-RUNTIME-INSTALL", | |
| "LF-DEP-VCS", | |
| "LF-DEP-VCS-MUTABLE-REF" | |
| ], | |
| "generator": "packages.dependency_suite", | |
| "ground_truth": "synthetic-generated", | |
| "must_not_rules": [], | |
| "repo_name": "dependency-risk-suite", | |
| "repo_type": "model", | |
| "safety": "inert/canary-only", | |
| "schema": 1, | |
| "validation": { | |
| "kind": "verify-package", | |
| "target": "." | |
| } | |
| } | |