{
  "name": "@lockhawk/core",
  "version": "0.2.11",
  "description": "Scanning engine for lockhawk: lockfile parsing, OSV.dev vulnerability matching, CVSS v3/v4 scoring, and SARIF/JUnit/HTML reports",
  "license": "MIT",
  "type": "module",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/lockhawk/lockhawk.git",
    "directory": "packages/core"
  },
  "homepage": "https://github.com/lockhawk/lockhawk#readme",
  "bugs": "https://github.com/lockhawk/lockhawk/issues",
  "publishConfig": {
    "access": "public"
  },
  "keywords": [
    "security",
    "vulnerability",
    "vulnerability-scanner",
    "vulnerability-scanning",
    "security-scanner",
    "cve-scanner",
    "dependency-scanner",
    "sca",
    "software-composition-analysis",
    "supply-chain-security",
    "devsecops",
    "audit",
    "scanner",
    "osv",
    "osv-scanner",
    "cve",
    "ghsa",
    "cvss",
    "sarif",
    "junit",
    "dependencies",
    "lockfile",
    "npm",
    "yarn",
    "pnpm"
  ],
  "main": "./dist/index.js",
  "module": "./dist/index.js",
  "types": "./dist/index.d.ts",
  "exports": {
    ".": {
      "types": "./dist/index.d.ts",
      "import": "./dist/index.js"
    }
  },
  "files": [
    "dist/**/*.js",
    "dist/**/*.d.ts"
  ],
  "dependencies": {
    "@yarnpkg/lockfile": "^1.1.0",
    "env-paths": "^4.0.0",
    "js-yaml": "^4.1.0",
    "p-limit": "^6.1.0",
    "p-retry": "^6.2.1",
    "semver": "^7.6.3",
    "yauzl": "^3.2.0",
    "zod": "^3.24.1"
  },
  "devDependencies": {
    "@types/js-yaml": "^4.0.9",
    "@types/semver": "^7.5.8",
    "@types/yauzl": "^2.10.3",
    "msw": "^2.7.0",
    "tsup": "^8.3.5",
    "typescript": "^5.7.2",
    "vitest": "^3.2.6"
  },
  "scripts": {
    "build": "tsup",
    "dev": "tsup --watch",
    "test": "vitest run",
    "typecheck": "tsc --noEmit"
  }
}