registry / @rockawayx/utils / 0.0.1-security

@rockawayx/utils@0.0.1-security

security holding package

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed attack surface is present in this package version. It has no install hooks, runtime entrypoints, executable files, network endpoints, or file-mutation logic.

Static reason

No blocking static signals were detected.

Trigger

None identified.

Impact

No package behavior capable of malicious execution was found.

Mechanism

Metadata-only security holding package.

Rationale

Direct inspection found a metadata-only placeholder release with no executable package content. The README's historical claim is not evidence of malicious behavior in @rockawayx/utils@0.0.1-security itself.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json contains only package metadata and no lifecycle scripts or entrypoints.
The package directory contains only package.json and README.md; no executable source, binaries, or dependencies are present.
README.md describes this release as a security holding placeholder and contains no executable instructions.

@rockawayx/utils@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code