registry / @finaxis/common-js / 0.3.1

@finaxis/common-js@0.3.1

common-js

AI Security Review

scanned 1h ago · by lpm-firewall-ai

No confirmed attack surface exists in the inspected package. The published executable entrypoint and prepublish target are absent.

Static reason

No blocking static signals were detected.

Trigger

None observed.

Impact

No credential access, network activity, persistence, or install-time execution confirmed.

Mechanism

No executable package code present.

Rationale

Direct inspection found only a manifest and documentation, with no shipped code to execute. The absent main file makes the package broken, not malicious.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

Package contents contain only package.json and README.md; no executable JavaScript or lifecycle target is present.
The sole lifecycle script is prepublishOnly, so it does not run during consumer installation.

Evidence against

package.json declares dist/common-js.js as main, but that file is absent from the inspected package.

@finaxis/common-js@0.3.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code