chore: remove package-lock.json from template (npm-avoidant)

[hyperpolymath]

Publishing the fix/package-lock-drift branch (2 commit(s) over main) — getting it on track per the 2026-05-16 estate pass. Far-from-main branches may need rebase before merge.

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 12 issues detected

Severity	Count
🔴 Critical	0
🟠 High	5
🟡 Medium	7

View findings

[
  {
    "reason": "Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (3 occurrences, CWE-494)",
    "type": "shell_download_then_run",
    "file": "/home/runner/work/v3-templater/v3-templater/setup.sh",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "Js.Dict deprecated -- use Dict (1 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/v3-templater/v3-templater/src/utils/Escape.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "high"
  },
  {
    "reason": "Js.Json deprecated -- use JSON (1 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/v3-templater/v3-templater/src/utils/Escape.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "medium"
  },
  {
    "reason": "Js.Dict deprecated -- use Dict (1 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/v3-templater/v3-templater/src/Compiler.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "high"
  },
  {
    "reason": "Js.Json deprecated -- use JSON (2 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/v3-templater/v3-templater/src/Compiler.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "medium"
  },
  {
    "reason": "Js.Dict deprecated -- use Dict (1 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/v3-templater/v3-templater/src/Runtime.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "high"
  },
  {
    "reason": "Js.Json deprecated -- use JSON (6 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/v3-templater/v3-templater/src/Runtime.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "medium"
  },
  {
    "reason": "Js.Dict deprecated -- use Dict (12 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/v3-templater/v3-templater/src/Cache.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "high"
  },
  {
    "reason": "Repository has 2 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "References STATE.scm -- should be .machine_readable/6a2/STATE.a2ml",
    "type": "SD007",
    "file": "0-AI-MANIFEST.a2ml",
    "action": "update_reference",
    "rule_module": "structural_drift",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence