registry / eslint-plugin-awaitly / 3.1.0

eslint-plugin-awaitly@3.1.0

ESLint rules for awaitly workflow patterns - catch common mistakes like immediate execution and unstable cache keys

AI Security Review

scanned 24d ago · by lpm-firewall-ai

No confirmed attack surface. The package is an ESLint plugin whose entrypoints expose static lint rules and configurations.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

User imports the plugin into ESLint configuration.

Impact

No package-originated network, filesystem, process, credential, or persistence behavior established.

Mechanism

AST-based lint diagnostics and source autofixes

Rationale

The fingerprint hint is not corroborated by source. Manifest and distributed entrypoints show a conventional ESLint rules-only package with no malicious behavior.

Evidence

package.jsondist/index.cjsdist/index.jsdist/index.d.tsdist/index.d.ctsREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall, install, or postinstall hook.
Entrypoints only export ESLint rule/config objects.

eslint-plugin-awaitly@3.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code