registry / @bellaxchuu/privatebails / 0.0.0-stage

@bellaxchuu/privatebails@0.0.0-stage

Temporary package placeholder for staged publishing

AI Security Review

scanned 12h ago · by lpm-firewall-ai

No attack surface was identified in the inspected manifest; it declares no lifecycle hooks or executable entrypoints.

Static reason

No blocking static signals were detected.

Trigger

No package-triggered action is declared in the manifest.

Impact

No attack behavior is established by the inspected source.

Mechanism

The manifest contains package metadata and a stub flag only.

AI rationale

The inspected package.json is a metadata-only stub with no lifecycle scripts or declared executable entrypoints. No malicious behavior is established by the inspected source.

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest declares only the package identity, version, a stub flag, and a placeholder description; it declares no lifecycle hooks or executable entrypoints.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

@bellaxchuu/privatebails@0.0.0-stage

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code