registry / @verified-network/verified-sdk / 2.8.4

@verified-network/verified-sdk@2.8.4

An SDK to develop applications on the Verified Network

AI Security Review

scanned 9d ago · by lpm-firewall-ai

No source files could be read because every read-only inspection command failed before process creation. No concrete attack surface was established.

Static reason

No blocking static signals were detected.

Trigger

Unknown because package files were unavailable for inspection.

Impact

Unknown.

Mechanism

Unknown.

Rationale

Read-only inspection was attempted with multiple shell paths, but the environment could not create a process, so source verification was impossible. The unverified scanner data alone is insufficient to label the package malicious or clean.

Decision evidence

public snapshot

AI called this Manual Review at 90.0% confidence as Unknown with high false-positive risk.

Evidence for block

Evidence against

The supplied manifest has no preinstall, install, or postinstall lifecycle hook.
The static hints describe a normal SDK entry point and command-line binary, but they are not source proof.

Behavioral surface

Source

Network

Supply chain

@verified-network/verified-sdk@2.8.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code