# Trivy skips website/ entirely via REPOSITORY_TRIVY_ARGUMENTS in .mega-linter.yml.
# The website is a Docusaurus static site generator — npm deps are build tooling
# only, not shipped in the Go binary. No npm CVEs need individual suppression.
