registry / ansi-tint / 1.4.5

ansi-tint@1.4.5

Zero-dependency ANSI color helpers for terminal output.

AI Security Review

scanned 27d ago · by lpm-firewall-ai

No confirmed attack surface was established. Installation only prints a terminal message, and the library formats ANSI-colored text.

Static reason

One or more suspicious static signals were detected.

Trigger

Package installation runs the post-install script; importing the library creates text-formatting helpers.

Impact

No file, network, credential, subprocess, or configuration effect was found.

Mechanism

Terminal message output and ANSI text wrapping.

AI rationale

The automatic post-install hook is unnecessary and noisy, but direct inspection shows it only prints a message based on terminal settings. No concrete malicious behavior or unresolved dangerous capability was found.

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package runs a post-install script automatically.
The install script reads terminal settings and prints a warning message.

Evidence against

The install script has no file writes, network access, subprocess execution, or dynamic code execution.
The runtime entry point only builds ANSI text-wrapping functions.

ansi-tint@1.4.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code