registry / cors-version / 1.0.0

cors-version@1.0.0

Node.js CORS middleware

AI Security Review

scanned 5h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The declared runtime entrypoint is absent, so importing the package fails rather than executing package code.

Static reason

No blocking static signals were detected.

Trigger

Consumer imports cors-version.

Impact

Application runtime failure/denial of functionality; no confirmed data or system impact.

Mechanism

Missing declared module entrypoint

Rationale

Source inspection found an incomplete, nonfunctional package but no executable payload or install-time behavior. The missing entrypoint is a quality/availability defect, not concrete malicious behavior.

Evidence

package.jsonREADME.mdLICENSE

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json main points to missing lib/index.js.

Evidence against

package.json has no preinstall/install/postinstall hooks.
Package contains only package.json, README.md, and LICENSE; no executable source is present.
No child-process, network, filesystem, credential, or dynamic-code behavior is present in inspected files.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 0 file(s), 0 B of source

Source & flagged code

1 flagged

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json main points to missing lib/index.js.

package.jsonView on unpkg

Source & flagged code

1 flagged · loading source

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json main points to missing lib/index.js.

package.jsonView on unpkg

Findings

2 Low

LowScripts Present

LowAi Review Evidencepackage.json