This repository deliberately contains insecure code for security-tool evaluation. Do not deploy, package, or reuse its source in a production application. Findings in the labelled fixtures are expected; report vulnerabilities in the benchmark infrastructure itself to security@dheemai.com.