registry / @danielsimonjr/mathts-core / 0.3.0

@danielsimonjr/mathts-core@0.3.0

Core types, utilities, and configuration for MathTS

AI Security Review

scanned 17d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established by package-local source inspection. The package exposes math types, unit parsing, and typed-function helpers without install-time code or exfiltration primitives.

Static reason

One or more suspicious static signals were detected.

Trigger

importing or calling exported math utilities

Impact

no credential, file, network, persistence, or destructive behavior observed

Mechanism

benign math/type utility library

Rationale

Static inspection found no lifecycle execution, network access, credential harvesting, shell execution, persistence, destructive behavior, or AI-agent control-surface mutation. The scanner's git dependency finding is explainable as a dependency source risk rather than concrete malicious code in this package.

Evidence

package.jsondist/index.jsdist/index.d.tsREADME.md

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json uses git dependency typed-function from github:danielsimonjr/typed-function, which is a supply-chain risk but not package-local attack behavior.

@danielsimonjr/mathts-core@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code