registry / fastify-addon / 0.0.1-security

fastify-addon@0.0.1-security

security holding package

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed attack surface exists in this published package version. It contains metadata and a documentation-only security placeholder.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

No install-time or runtime package action.

Mechanism

No executable behavior.

Rationale

Direct inspection shows a non-executable security holding package with no lifecycle hooks or code. The README describes historical removal, not active behavior in this version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

README.md states this is a security holding placeholder after prior removal.

Evidence against

package.json has only package metadata; no scripts or entrypoints.
Package inventory contains only package.json and README.md.
No executable source, dependencies, binaries, or lifecycle hooks are present.
No network, file-write, shell, credential, or dynamic-loading behavior exists.

fastify-addon@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings