@gammarers/projen-projects@0.6.0
[](https://www.npmjs.com/package/@gammarers/projen-projects) [](https://www.npmjs
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe inspected manifest has no install lifecycle hook, and its main entrypoint re-exports project classes. No malicious behavior was identified in the inspected excerpts.
Decision evidence
public snapshot- package.json declares projen as its runtime dependency and contains no install lifecycle hook.
- lib/index.js re-exports project classes; the inspected entrypoint contains no independent attack behavior.
- The bundled projen manifest identifies the dependency as a software project generator, and its library entrypoint re-exports project features.
- The excerpts identify GitLab and CircleCI configuration or model exports, alongside VS Code devcontainer and extension components.
- The excerpts identify VS Code launch and settings components and Java project and Maven components.
- The excerpts identify Java testing and Projen configuration exports, alongside Python pip, Poetry, Projen, and pytest components.
- The excerpts identify Python project, TOML, sample, requirements, packaging, virtual environment, and uv configuration exports.
- The excerpts identify Projen's Python and TypeScript project, script-runner, and documentation components.
Source & flagged code
8 flaggedpackage.json declares projen as its runtime dependency and contains no install lifecycle hook.
package.jsonView on unpkg · L51The bundled projen manifest identifies the dependency as a software project generator, and its library entrypoint re-exports project features.
.lpm-dependency-evidence-96aaa959-b746-4725-8727-1a371ce741c3/0/npm-linux/package.jsonView on unpkg · L2Findings
Affected versions and remediation
This report applies to @gammarers/projen-projects@0.6.0.
See all versions of @gammarers/projen-projects for other recorded verdicts.
- Review the evidence and your use of @gammarers/projen-projects@0.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.