registry / evo360-types / 1.3.400

evo360-types@1.3.400

HREVO360 Shared Types

AI Security Review

scanned 18d ago · by lpm-firewall-ai

No confirmed attack surface was established by source inspection. The package is a shared TypeScript types and Zod schemas package with local re-exports and data shape definitions.

Static reason

One or more suspicious static signals were detected.

Trigger

importing package modules

Impact

No malicious install-time, import-time, persistence, credential harvesting, or exfiltration behavior found.

Mechanism

local type/schema exports

Rationale

Static source inspection shows package-aligned definitions and schemas only; scanner secret hits are field names or enum labels such as password/token references, not embedded credentials or harvesting logic. No lifecycle execution, dangerous primitives, filesystem writes, AI-agent surface mutation, or exfiltration endpoints were found.

Evidence

package.jsondist/index.jsdist/types/evo-med/people/index.tsdist/apps/shared/zod-schemas.jsdist/apps/evo-hub-ia/v1/adapter-tool-registry.js

Network endpoints3

www.hubmedica.com.brgitlab.com/hrhub/hr-evo360/evo-types.gitdocs.asaas.com/docs/payment-events

evo360-types@1.3.400

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code