registry / @danielsimonjr/mathts-core / 0.3.1

@danielsimonjr/mathts-core@0.3.1

Core types, utilities, and configuration for MathTS

AI Security Review

scanned 17d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established by source inspection. The GitHub dependency is a supply-chain risk signal, but the package code itself is math utilities and typed-function integration without install-time execution or exfiltration behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User imports the package or calls exported math/type helpers

Impact

No credential theft, persistence, destructive action, or data exfiltration observed

Mechanism

Benign math core library exports

Rationale

Static inspection found a normal ESM math utility package with no lifecycle hooks, shell execution, file harvesting, network calls, or obfuscated payloads. The scanner's git-dependency signal is package-aligned and does not by itself establish malicious behavior.

Evidence

package.jsondist/index.jsdist/index.d.tsREADME.md

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json uses a GitHub dependency: typed-function github:danielsimonjr/typed-function

Evidence against

@danielsimonjr/mathts-core@0.3.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code