)]}'
{
  "commit": "4108568fda72f41eca697af6dd7de9f7f470bac6",
  "tree": "c6a2f458ab20bfba7d226e7c8a4faf81a71a787c",
  "parents": [
    "b378e67a6c92538d67273a70e0a53db1de6172d2"
  ],
  "author": {
    "name": "Marc Kupietz",
    "email": "kupietz@ids-mannheim.de",
    "time": "Thu Jul 23 12:01:12 2026 +0200"
  },
  "committer": {
    "name": "Marc Kupietz",
    "email": "kupietz@ids-mannheim.de",
    "time": "Thu Jul 23 12:01:12 2026 +0200"
  },
  "message": "Add repository field for npm provenance verification\n\nnpm rejects provenance-signed publishes (E422) when package.json has no\nrepository.url matching the GitHub repo recorded in the sigstore\nprovenance statement.\n\nCo-Authored-By: Claude Opus 4.8 \u003cnoreply@anthropic.com\u003e\nChange-Id: Ie6cf80826b6bd36ea16b430acb7098e9d1138211\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9039cd1f1fca3f4b9f3f0e435bc5d4a92c91a1ad",
      "old_mode": 33188,
      "old_path": "package.json",
      "new_id": "b3358392160abc4441a455bdedcbc0e6274caffe",
      "new_mode": 33188,
      "new_path": "package.json"
    }
  ]
}