AI called this Clean at 99.0% confidence as Benign with low false-positive risk.
Evidence against
- `package.json` has no lifecycle scripts, entrypoints, dependencies, or executable configuration.
- Package contains only `package.json` and `README.md`; no source, binaries, or payload files exist.
- `README.md` describes this version as a security holding placeholder.
- No network, filesystem, shell, credential, or AI-agent-control behavior is present in inspected files.
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainNo supply-chain packaging signals triggered.
scanned 0 file(s), 0 B of source