@tdspt/transdepend

[THIS IS A TEST]
This package is the root (stager) package used in a controlled supply-chain security engagement to validate:

• SBOM completeness and accuracy
• Visibility of transitive dependencies
• Detection of new or unfamiliar scopes/sources
• Dependency graph and lockfile review workflows

This package is intentionally minimal and inert.

Role in the Engagement

This package serves as the entry point for the test. Its purpose is to:

• Introduce a known, trusted level-1 dependency
• Allow that dependency to introduce a surprise transitive sub-dependency
• Provide a deterministic runtime signal confirming the root package was loaded

It does not:

• Execute lifecycle scripts
• Perform network activity
• Spawn processes
• Import or execute transitive dependencies

Dependency Chain

Expected dependency structure:

• @tdspt/transdepend (this package)
  • @tdspt/depends-lvl1
    • @tdspt/depends-lvl2

The root package never references lvl2 directly.
Presence of lvl2 should only be observable via:

• package-lock.json
• SBOM output
• Dependency graph tooling

Runtime Behavior

When this package is loaded (e.g. via require() or import), it appends a single JSON Lines (.jsonl) entry to: