registry / @goparrot-dashboard/app / 0.0.3
@goparrot-dashboard/app@0.0.3
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest contains no lifecycle scripts or dependencies, and the only runtime entry point prints a fixed string. No malicious or suspicious behavior was identified in the package source.
Static reason
No blocking static signals were detected.
Trigger
Importing the package loads index.js.
Impact
Only a log message is produced; no security impact is apparent.
Mechanism
index.js calls console.log with a fixed string.
AI rationale
The manifest contains no lifecycle scripts or dependencies, and the only runtime entry point prints a fixed string. No malicious or suspicious behavior was identified in the package source.
Decision evidence
public snapshotAI called this Clean at 99.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines no lifecycle scripts, dependencies, or executable bin; its main entry is index.js.
- The entry point only logs a package label and performs no visible file, network, credential, or account actions.
Evidence against
Behavioral surface
Trivial
Source & flagged code
2 flaggedpackage.jsonView file
1{
"name": "@goparrot-dashboard/app",
"version": "0.0.3",
"description": "rootxravi-poc-security",
"main": "index.js",
"author": "rootxravi-poc-security",
"license": "ISC"
}
Low
Suspicious Lifecycle Evidence
The manifest defines no lifecycle scripts, dependencies, or executable bin; its main entry is index.js.
package.jsonView on unpkg · L1index.jsView file
1console.log("[rootxravi-poc-security] @goparrot-dashboard/app");
Low
Ai Review Evidence
The entry point only logs a package label and performs no visible file, network, credential, or account actions.
index.jsView on unpkg · L1Findings
2 Low
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidenceindex.js
Affected versions and remediation
This report applies to @goparrot-dashboard/app@0.0.3.
See all versions of @goparrot-dashboard/app for other recorded verdicts.
- Review the evidence and your use of @goparrot-dashboard/app@0.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.