registry / cspell-esm / 0.0.1-security
cspell-esm@0.0.1-security
security holding package
This package appears in our research on the dependency confusion probes at version 99 and above, with how it works, the full package list and what to do if you installed it.
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 100.0% confidence. No malicious behavior was detected; 1 low-signal pattern(s) were surfaced and cleared.
Static reason
Verified npm security holding placeholder published by npm; no executable package surface is present.
Decision evidence
public snapshotBehavioral surface
Source & flagged code
0 flagged · loading sourceNo flagged code excerpts are attached to this scan.
Findings
1InfoNpm Security Holding Package
Affected versions and remediation
This report applies to cspell-esm@0.0.1-security.
See all versions of cspell-esm for other recorded verdicts.
- Review the evidence and your use of cspell-esm@0.0.1-security before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.