{
  "candidate_rules": [
    "LF-JS-CHILD-PROCESS",
    "LF-JS-REQUIRE-CHILD-PROCESS"
  ],
  "corpus_id": "LF-CORPUS-JS-0001",
  "description": "JavaScript package containing process, dynamic-code, filesystem, network, credential and npm install-hook indicators.",
  "expected_rules": [
    "LF-JS-SEMANTIC-CREDENTIAL-ACCESS",
    "LF-JS-SEMANTIC-DYNAMIC-CODE",
    "LF-JS-SEMANTIC-FILESYSTEM-WRITE",
    "LF-JS-SEMANTIC-NETWORK",
    "LF-JS-SEMANTIC-PROCESS",
    "LF-DEP-NPM-INSTALL-HOOK"
  ],
  "generator": "packages.javascript_chain",
  "ground_truth": "synthetic-generated",
  "must_not_rules": [],
  "repo_name": "javascript-capability-chain",
  "repo_type": "model",
  "safety": "inert/canary-only",
  "schema": 1,
  "validation": {
    "kind": "verify-package",
    "target": "."
  }
}