registry / @danielsimonjr/mathts-core / 0.9.0

@danielsimonjr/mathts-core@0.9.0

Core types, utilities, and configuration for MathTS

AI Security Review

scanned 3d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Importing the package loads mathematical utilities; optional WASM initialization requires an explicit caller invocation.

Static reason

One or more suspicious static signals were detected.

Trigger

Package import; optional caller invocation of initTypedWasm().

Impact

No credential access, persistence, destructive action, or exfiltration found.

Mechanism

Math types, unit conversion, and typed-function integration.

Rationale

The GitHub dependency explains the scanner finding but is not concrete malicious behavior in this package. Shipped source is math-focused and lacks install-time or runtime attack primitives.

Evidence

package.jsondist/index.jsdist/internal.jsdist/chunk-2WW76EEF.jsREADME.md

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json uses a GitHub-sourced typed-function dependency.

Evidence against

package.json has no preinstall, install, or postinstall hooks.

@danielsimonjr/mathts-core@0.9.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code