ISSUE-004 — Support Strict Version Pinning & Dependency Audits

[ISONIC0788]

What to build

Upgrade the package engine to enforce exact version locks for every package added. This prevents accidental downstream peer issues from semantic version expressions (^ or ~). Additionally, loop back post-install to run a programmatic audit scan to catch vulnerability flags early.

Files to modify

• src/dependencies.js

Specs

• Section 5.4 (Dependency Resolution Algorithm) guidelines.

Acceptance criteria

• Strip caret (^) and tilde (~) symbols from all dependencies dynamically pushed via code logic.
• Trigger an explicit npm audit verification block following execution steps.
• Interrupt scaffolding or throw descriptive console alerts if high-severity vulnerabilities are verified.

Dependencies

• None