T3MP3ST v1 — hardened launch (AGPL, verify-claims 24/24, leak-scrubbed)

bench/cve-zero/samples/GHSA-86vw-mfpg-wwv9/ground-truth.json

@@ -0,0 +1 @@
+{"ghsa": "GHSA-86vw-mfpg-wwv9", "repo": "jsonata-js/jsonata", "cwes": ["CWE-1333"], "summary": "fix $toMillis() with more than 3 digit fractional seconds (#782)", "fix_commit": "80ba95d170f74e3f20f4f36b8b77d8c85cea7686", "parent_commit": "1c9665056e4217d46b44c859fe128c96d5c5bc3f", "vuln_files": ["src/datetime.js"], "vuln_lines": {"src/datetime.js": [996]}, "source_files": 6, "scope_dirs": ["src"], "source_note": "Subset: only the src/ package (containing the vuln file) was copied into source/, not the full repo."}