registry / @sectest429/hello-npm-world / 0.0.1-security

@sectest429/hello-npm-world@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface exists in the inspected package contents. The package is metadata and documentation only.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

No package-originated impact established.

Mechanism

No executable behavior.

Rationale

Current package contents contain no executable source or lifecycle hooks. The README's historical-removal statement is not evidence of active malicious behavior in this holding release.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` states this is a security holding package for previously removed code.

Evidence against

`package.json` has no scripts, entrypoints, dependencies, or bin configuration.
Only `README.md` and `package.json` are present; neither contains executable code.
No network, shell, file-write, credential, or AI-agent configuration behavior is present.

@sectest429/hello-npm-world@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code