{
  "name": "@factory/security",
  "version": "0.1.0",
  "private": true,
  "description": "TASK-0134 security audit suites (OWASP ASVS L2): dependency/license audit, gitleaks config, auth-path review (alg-pinning, refresh-reuse, session fixation, cookie flags, CSRF route-walk), permission fuzzing (fast-check vs brute-force oracle), CORS/CSRF/CSP header crawler, file-upload abuse, formula fuzz (100k-op/50ms guards), rate-limit verification, image/artifact secret scans, and the audit-report cross-check. Runs as a CI stage between build and E2E.",
  "type": "module",
  "scripts": {
    "test": "vitest run",
    "test:ci": "vitest run --reporter=default",
    "typecheck": "tsc --noEmit -p tsconfig.json"
  },
  "devDependencies": {
    "@factory/database-engine": "workspace:*",
    "@factory/permissions": "workspace:*",
    "@factory/shared": "workspace:*",
    "@factory/storage": "workspace:*",
    "@types/node": "^20.14.0",
    "fast-check": "^3.22.0",
    "typescript": "^5.6.0",
    "vitest": "^2.1.0",
    "yaml": "2.9.1"
  }
}