@deersight/shared-lib 0.0.1

package/README.md

@@ -0,0 +1,8 @@
+# SECURITY RESEARCH PoC — do not use
+
+This package was published as proof-of-concept evidence for a dependency-confusion
+report submitted to John Deere via HackerOne. It intentionally contains no
+executable logic, no install scripts, and no dependencies.
+
+If you are John Deere security/legal and found this: contact iamrjarpan@protonmail.com.
+This package will be removed or transferred to John Deere on request.

package/index.js

@@ -0,0 +1,2 @@
+// Security research PoC — intentionally inert. No side effects, no dependencies.
+module.exports = {};

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@deersight/shared-lib",
+  "version": "0.0.1",
+  "description": "SECURITY RESEARCH PoC (dependency confusion). Published by an authorized HackerOne researcher as part of the John Deere bug bounty program to demonstrate this npm scope was unclaimed on the public registry while being referenced by internal John Deere builds (DeereSight). This package is intentionally empty and executes no code on install (no scripts field). Contact: iamrjarpan@protonmail.com. Will be removed or transferred to John Deere upon report resolution.",
+  "main": "index.js",
+  "license": "UNLICENSED",
+  "publishConfig": {
+    "access": "public"
+  }
+}