@ivuorinen/stylelint-config@1.2.3

One or more suspicious static signals were detected.

npm install runs postinstall; runtime import loads Stylelint config

May create .stylelintrc.json in the installing project if no Stylelint config exists; no exfiltration or code execution chain observed

package-aligned .stylelintrc.json creation and static config exports

Direct source inspection shows the lifecycle hook performs disclosed, package-aligned Stylelint config initialization and the entrypoints export static lint rules. There is no evidence of credential access, network exfiltration, persistence, remote payload loading, or AI-agent control-surface mutation.