@tdsptoptesting/depends-lvl1

[THIS IS A TEST] This package is used as a level-1 dependency in a supply-chain visibility/security engagement to validate:

• SBOM completeness (transitive dependencies included)
• Dependency graph visibility (lockfile + scanners)
• Awareness of new/unfamiliar scopes/hosts introduced transitively

What this package does

• Declares a transitive dependency on @tdsptoptesting/depends-lvl2 in package.json.
• Writes a single JSONL log entry to tdspt-transitive.log when this module is loaded.

It does not execute any install-time scripts and does not automatically import/execute lvl2.

Transitive dependency chain

Expected shape:

• @tdsptoptesting/tdsptoptesting-transdepend (root)
  • @tdsptoptesting/depends-lvl1 (this package)
    • @tdspt-surprise/depends-lvl2 (transitive "surprise" dependency)

Logging

When a consumer loads this module (e.g. require('@tdsptoptesting/depends-lvl1')), it appends JSON lines to:

• tdspt-transitive.log in the consumer's working directory (process.cwd())

Example log entry:

{"timestamp":"2025-12-17T15:02:11.123Z","package":"@tdsptoptesting/depends-lvl1","version":"4.3.2","event":"lvl1_loaded","note":"Module loaded; lvl2 remains transitive unless explicitly required by consumer."}```