| { | |
| "candidate_rules": [ | |
| "LF-JS-CHILD-PROCESS", | |
| "LF-JS-REQUIRE-CHILD-PROCESS" | |
| ], | |
| "corpus_id": "LF-CORPUS-JS-0001", | |
| "description": "JavaScript package containing process, dynamic-code, filesystem, network, credential and npm install-hook indicators.", | |
| "expected_rules": [ | |
| "LF-JS-SEMANTIC-CREDENTIAL-ACCESS", | |
| "LF-JS-SEMANTIC-DYNAMIC-CODE", | |
| "LF-JS-SEMANTIC-FILESYSTEM-WRITE", | |
| "LF-JS-SEMANTIC-NETWORK", | |
| "LF-JS-SEMANTIC-PROCESS", | |
| "LF-DEP-NPM-INSTALL-HOOK" | |
| ], | |
| "generator": "packages.javascript_chain", | |
| "ground_truth": "synthetic-generated", | |
| "must_not_rules": [], | |
| "repo_name": "javascript-capability-chain", | |
| "repo_type": "model", | |
| "safety": "inert/canary-only", | |
| "schema": 1, | |
| "validation": { | |
| "kind": "verify-package", | |
| "target": "." | |
| } | |
| } | |