codeql/javascript/ql/test/query-tests/Security/CWE-300/package.json

{
    "name": "insecure-dep-downloader",
    "dependencies": {
        "foo": "*",
        "good1": "https://example.org/foo",
        "bad1": "http://example.org/foo",
        "bad2": "ftp://example.org/foo"
    },
    "devDependencies": {
        "bar": "*",
        "good2": "https://example.org/foo",
        "bad3": "http://example.org/foo",
        "bad4": "ftp://example.org/foo"
    }
}