registry / @wizloft/harness-plugin-repository-files / 0.0.1-security
@wizloft/harness-plugin-repository-files@0.0.1-security
security holding package
This package appears in our research on the fake Tailwind CSS plugins, with how it works, the full package list and what to do if you installed it.
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 100.0% confidence. No malicious behavior was detected; 1 low-signal pattern(s) were surfaced and cleared.
Static reason
Verified npm security holding placeholder published by npm; no executable package surface is present.
Decision evidence
public snapshotBehavioral surface
Source & flagged code
0 flaggedNo flagged code excerpts are attached to this scan.
Findings
1InfoNpm Security Holding Package
Affected versions and remediation
This report applies to @wizloft/harness-plugin-repository-files@0.0.1-security.
See all versions of @wizloft/harness-plugin-repository-files for other recorded verdicts.
- Review the evidence and your use of @wizloft/harness-plugin-repository-files@0.0.1-security before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.