A JSONPath engine that follows the spec and can't run code

padvinder is a 2.75KB, zero-dependency JSONPath engine: full RFC 9535 including filters, no eval, no new Function, and safe under a strict CSP.