registry / eslint-plugin-awaitly / 3.2.0

eslint-plugin-awaitly@3.2.0

ESLint rules for awaitly workflow patterns - catch common mistakes like immediate execution and unstable cache keys

AI Security Review

scanned 47m ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is an ESLint plugin whose shipped entrypoint defines local AST-analysis rules.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

User imports the plugin in an ESLint configuration.

Impact

No file mutation, credential collection, command execution, or network activity established.

Mechanism

Local ESLint rule registration and AST reporting/autofix.

Rationale

The manifest has no install hooks and the shipped code is limited to ESLint rule logic and configuration exports. The scanner fingerprint is a false positive unsupported by source behavior.

Evidence

package.jsondist/index.cjsdist/index.jsREADME.md

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

Inspected package manifest and compiled entrypoints; no malicious behavior found.
No lifecycle scripts are declared.
Entrypoint implements ESLint AST rules and exports rule/config objects.

eslint-plugin-awaitly@3.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code