# vuln-js-repo
Fixture: pins lodash 4.17.15 (planted, known-vulnerable per the offline advisory fixture).