SAMPLE EVIDENCE for TP-01 (made-up app Tidyhaus; not a real review) npm audit --omit=dev: 0 critical, 0 high, 2 moderate, 1 low (screenshot described).