build: rename package.json to avoid dependabot scan (#3216)

.gitignore

@@ -23,4 +23,5 @@ packages/**/.swc
 .webpack
 packages/api/core/test/fixture/app-with-scoped-name/out/make
 packages/plugin/webpack/test/fixtures/apps/native-modules/package-lock.json
+packages/plugin/fuses/test/fixture/app
 .links

packages/plugin/fuses/test/FusesPlugin_spec_slow.ts

@@ -16,7 +16,7 @@ describe('FusesPlugin', () => {
   };
 
   const packageJSON = JSON.parse(
-    fs.readFileSync(path.join(appPath, 'package.json'), {
+    fs.readFileSync(path.join(appPath, 'package.json.tmpl'), {
       encoding: 'utf-8',
     })
   );
@@ -30,6 +30,7 @@ describe('FusesPlugin', () => {
 
   before(async () => {
     delete process.env.TS_NODE_PROJECT;
+    await fs.promises.copyFile(path.join(appPath, 'package.json.tmpl'), path.join(appPath, 'package.json'));
     await spawn('yarn', ['install'], spawnOptions);
   });