{"agent":"codex","input":"Audit this Laravel repository without changing any tracked file. Return only JSON with three arrays. outdated_dependencies: direct Composer and npm packages whose latest release is at least one major version ahead of what the lockfile installs, with name, ecosystem (composer or npm), locked and latest. tests: every test and type-check command the project defines in composer.json, package.json and its CI workflows, with the command, passed true or false, and the last 20 lines of output when it failed. risky_patterns: up to ten patterns such as raw SQL built from request input, unescaped Blade output of user data, file paths built from the request, or models with no mass-assignment guard, each with file, line, pattern and a one-sentence reason. Install whatever PHP extensions and services the tests need inside the sandbox.","resources":[{"url":"https://github.com/your-org/your-app"}]}