registry / @emcd-vue/auth / 0.0.1-security

@emcd-vue/auth@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface exists in this package version. The manifest is metadata-only and the package contains no executable files.

Static reason

No blocking static signals were detected.

Trigger

none

Impact

none

Mechanism

metadata-only security holding package

Rationale

Direct inspection shows this version is an inert holding package, not the prior removed artifact referenced by its README. No install-time or runtime behavior is present.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` states this is a security holding placeholder for a previously removed package.

Evidence against

`package.json` has no scripts, dependencies, entrypoints, or bin fields.
Only `package.json` and `README.md` exist in the package.
No executable source, lifecycle hook, network endpoint, file access, or payload is present.

@emcd-vue/auth@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code