registry / @fhkry/x-baileys / 0.0.1-security

@fhkry/x-baileys@0.0.1-security

security holding package

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed attack surface in the inspected package contents. The manifest defines no lifecycle hooks, entrypoints, dependencies, or executable files.

Static reason

No blocking static signals were detected.

Trigger

None identified.

Impact

No install-time or runtime behavior is present.

Mechanism

Metadata-only security holding package.

Rationale

Direct inspection found a metadata-only package with no code, lifecycle scripts, dependencies, or entrypoints. The README's historical claim is not treated as evidence of behavior in this package version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json contains only package metadata; no scripts or entrypoints.
No executable source files exist; package contains only package.json and README.md.
README.md is descriptive only and contains no executable instructions or payload.

@fhkry/x-baileys@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code