registry / @flex-ng/filter-pipe / 0.0.1-security

@flex-ng/filter-pipe@0.0.1-security

security holding package

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed attack surface. The package is a manifest-only security holding package with no install hooks, entrypoints, or executable source.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No package-originated file, process, network, credential, or persistence action is established.

Mechanism

No executable package behavior

Rationale

Direct inspection found only a minimal manifest and a README; neither exposes runtime or install-time behavior. The README's historical statement does not demonstrate malicious code in this published version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json defines no lifecycle scripts or executable entrypoints.
Package tree contains only package.json and README.md; no source, binaries, or dependencies.
README.md identifies this release as a security holding placeholder, with no executable instructions.

@flex-ng/filter-pipe@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code