A caller invoking validated(value) causes an outbound request to a concealed validation endpoint. No install-time execution or local-data collection is present.
Static reason
No blocking static signals were detected.
Trigger
Runtime call to validated(e).
Impact
Caller-supplied values are transmitted to the endpoint; the concealed destination prevents transparent review.
Mechanism
Obfuscated outbound axios GET to a remote API.
Rationale
The hidden network destination and silent failure handling create unresolved risk, though the observed request aligns with the package's stated validation role and no concrete malicious chain is present.
Evidence
index.jspackage.jsonREADME.md
Network endpoints1
api-validate.vercel.app/api/