AI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence against
- package.json defines no lifecycle scripts or bin entrypoint.
- dist/index.mjs only computes streak statistics from supplied entries.
- dist/internal/streakmath.mjs contains deterministic date/run-length calculations.
- dist/server.mjs only hashes inputs and delegates optional cache get/set to its declared dependency.
- No network, shell, dynamic-code, credential, or destructive file primitives appear in package source.
Behavioral surface
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 4.24 KB of source