registry / @arthurka/ts-utils / 3.18.2

@arthurka/ts-utils@3.18.2

Some convenient TS utilities.

AI Security Review

scanned 14h ago · by lpm-firewall-ai

No confirmed malicious runtime attack surface. A prepare-only Husky setup may mutate local VCS-hook configuration when that lifecycle runs.

Static reason

No blocking static signals were detected.

Trigger

npm prepare during a source/git or development install

Impact

May create or update project-local Git hooks; no payload or data transfer is present.

Mechanism

conditional Husky VCS-hook installation

Rationale

Source inspection found a user-invoked download helper but no embedded destination or automatic execution. Per lifecycle policy, the prepare-only Husky setup warrants a non-blocking warning rather than a malicious block.

Evidence

package.jsondist/esm/backend.jsdist/esm/index.jsdist/cjs/backend.cjsdist/cjs/index.cjs

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json has a prepare hook that conditionally invokes husky.install().
The hook can set up VCS hooks in a source/git install context.

@arthurka/ts-utils@3.18.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code