registry / @sflyinc-knapsack/shutterfly-react / 0.0.1-security

@sflyinc-knapsack/shutterfly-react@0.0.1-security

security holding package

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed attack surface is present. The package is metadata plus an informational README only.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No code runs on install or import.

Mechanism

No executable package behavior

Rationale

Direct inspection shows this version is a non-executable security holding package. Its README describes historical removal of malicious code but contains no active behavior.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` says this is a security holding package and references prior removed code.

Evidence against

`package.json` has no scripts, bin, main, module, or browser entrypoints.
Package contains only `package.json` and `README.md`; no executable source or payload files.
No install-time hooks, network code, file writes, subprocesses, or credential access found.

@sflyinc-knapsack/shutterfly-react@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code