Dummy manifest to trigger security checks on JS dependencies