registry / @ivuorinen/stylelint-config / 1.3.1

@ivuorinen/stylelint-config@1.3.1

ivuorinen's shareable configuration for stylelint.

AI Security Review

scanned 17h ago · by lpm-firewall-ai

No confirmed malicious attack surface. Installation may create a documented Stylelint configuration file only when no existing config is found.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

Adds a local Stylelint configuration; no exfiltration or remote execution.

Mechanism

conditional creation of a fixed .stylelintrc.json

Rationale

The lifecycle write is package-aligned, documented, and guarded against existing configurations. Source inspection found no concrete malicious behavior.

Evidence

package.jsonscripts/postinstall.cjsREADME.mdcss/index.cjsscss/index.cjs$INIT_CWD/.stylelintrc.json

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json invokes scripts/postinstall.cjs at install time.
scripts/postinstall.cjs can create $INIT_CWD/.stylelintrc.json.

Evidence against

@ivuorinen/stylelint-config@1.3.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code