{
  "candidate_rules": [],
  "corpus_id": "LF-CORPUS-DEP-0001",
  "description": "Mixed Python/npm dependency manifests exercising alternate indexes, URLs, missing includes, insecure transport, local paths, path escapes, install hooks and VCS references.",
  "expected_rules": [
    "LF-DEP-ALT-INDEX",
    "LF-DEP-DIRECT-URL",
    "LF-DEP-INCLUDE-MISSING",
    "LF-DEP-INSECURE-TRANSPORT",
    "LF-DEP-BUILD-BACKEND",
    "LF-DEP-INSTALL-HOOK",
    "LF-DEP-LOCAL-PATH",
    "LF-DEP-PATH-ESCAPE",
    "LF-DEP-NPM-INSTALL-HOOK",
    "LF-DEP-RUNTIME-INSTALL",
    "LF-DEP-VCS",
    "LF-DEP-VCS-MUTABLE-REF"
  ],
  "generator": "packages.dependency_suite",
  "ground_truth": "synthetic-generated",
  "must_not_rules": [],
  "repo_name": "dependency-risk-suite",
  "repo_type": "model",
  "safety": "inert/canary-only",
  "schema": 1,
  "validation": {
    "kind": "verify-package",
    "target": "."
  }
}