From d424a8c04388b683a34bd6a53b3e9222c2e95228 Mon Sep 17 00:00:00 2001
From: Anton <toxakara@gmail.com>
Date: Wed, 21 Oct 2026 00:04:03 -0400
Subject: [PATCH] test(ci): seed a vulnerable dependency to exercise dependency
 review

---
 package.json | 109 ++++++++++++++++++++++++++++++++++++++++++---------
 1 file changed, 91 insertions(+), 18 deletions(-)

diff --git a/package.json b/package.json
index 0190b07..d0bc921 100644
--- a/package.json
+++ b/package.json
@@ -1,21 +1,94 @@
 {
-  "name":"@packvium/engine",
-  "version":"1.7.0",
-  "description":"Deterministic 3D bin-packing and cartonization engine for pallets, containers, trucks and shipping cartons. Exact integer geometry, reproducible results.",
-  "author":{"name":"Packvium contributors","url":"https://packvium.com"},
-  "keywords":["3d-bin-packing","bin-packing","3d-packing","cartonization","container-loading","pallet-packing","truck-loading","packing-algorithm","logistics","deterministic"],
-  "homepage":"https://packvium.com",
-  "repository":{"type":"git","url":"git+https://github.com/toxakara/packvium-node.git"},
-  "bugs":{"url":"https://github.com/toxakara/packvium-node/issues"},
-  "type":"module",
-  "main":"index.js",
-  "types":"index.d.ts",
-  "exports":{".":{"types":"./index.d.ts","import":"./index.js"},"./execution.js":{"types":"./execution.d.ts","import":"./execution.js"},"./artifacts.js":{"types":"./artifacts.d.ts","import":"./artifacts.js"},"./artifact-exports.js":{"types":"./artifact-exports.d.ts","import":"./artifact-exports.js"},"./revisions.js":{"types":"./revisions.d.ts","import":"./revisions.js"},"./scene.js":{"types":"./scene.d.ts","import":"./scene.js"}},
-  "files":["index.js","fallback.js","contact-graph.js","policy.js","commerce.js","commerce-model.js","execution.js","canonical-json.js","artifacts.js","artifact-exports.js","revisions.js","scene.js","request-errors.js","made-to-measure.js","examples","index.d.ts","execution.d.ts","artifacts.d.ts","artifact-exports.d.ts","revisions.d.ts","scene.d.ts","README.md","SECURITY.md"],
-  "engines":{"node":">=16"},
-  "scripts":{
-    "test":"node test/run-tests.mjs",
-    "test:legacy":"node test/legacy-smoke.mjs"
+  "name": "@packvium/engine",
+  "version": "1.7.0",
+  "description": "Deterministic 3D bin-packing and cartonization engine for pallets, containers, trucks and shipping cartons. Exact integer geometry, reproducible results.",
+  "author": {
+    "name": "Packvium contributors",
+    "url": "https://packvium.com"
   },
-  "license":"MIT"
+  "keywords": [
+    "3d-bin-packing",
+    "bin-packing",
+    "3d-packing",
+    "cartonization",
+    "container-loading",
+    "pallet-packing",
+    "truck-loading",
+    "packing-algorithm",
+    "logistics",
+    "deterministic"
+  ],
+  "homepage": "https://packvium.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/toxakara/packvium-node.git"
+  },
+  "bugs": {
+    "url": "https://github.com/toxakara/packvium-node/issues"
+  },
+  "type": "module",
+  "main": "index.js",
+  "types": "index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "import": "./index.js"
+    },
+    "./execution.js": {
+      "types": "./execution.d.ts",
+      "import": "./execution.js"
+    },
+    "./artifacts.js": {
+      "types": "./artifacts.d.ts",
+      "import": "./artifacts.js"
+    },
+    "./artifact-exports.js": {
+      "types": "./artifact-exports.d.ts",
+      "import": "./artifact-exports.js"
+    },
+    "./revisions.js": {
+      "types": "./revisions.d.ts",
+      "import": "./revisions.js"
+    },
+    "./scene.js": {
+      "types": "./scene.d.ts",
+      "import": "./scene.js"
+    }
+  },
+  "files": [
+    "index.js",
+    "fallback.js",
+    "contact-graph.js",
+    "policy.js",
+    "commerce.js",
+    "commerce-model.js",
+    "execution.js",
+    "canonical-json.js",
+    "artifacts.js",
+    "artifact-exports.js",
+    "revisions.js",
+    "scene.js",
+    "request-errors.js",
+    "made-to-measure.js",
+    "examples",
+    "index.d.ts",
+    "execution.d.ts",
+    "artifacts.d.ts",
+    "artifact-exports.d.ts",
+    "revisions.d.ts",
+    "scene.d.ts",
+    "README.md",
+    "SECURITY.md"
+  ],
+  "engines": {
+    "node": ">=16"
+  },
+  "dependencies": {
+    "lodash": "4.17.20"
+  },
+  "scripts": {
+    "test": "node test/run-tests.mjs",
+    "test:legacy": "node test/legacy-smoke.mjs"
+  },
+  "license": "MIT"
 }