Baseline · Skills & supply chain
C-04 Dependencies have integrity checks (lockfile)
medfilesystem · CLI
Why it matters
Lockfile + hash verification to prevent dependency poisoning.
How to test
Check for a lockfile and hash/integrity verification.
How to fix
Commit lockfiles; verify dependency integrity in CI.