registry / fs-extra-core / 0.0.1-security

fs-extra-core@0.0.1-security

security holding package

AI Security Review

scanned 23d ago · by lpm-firewall-ai

No executable package attack surface is present. The README describes a placeholder rather than active behavior.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

No confirmed impact from this published package version.

Mechanism

Metadata-only holding package

Rationale

Direct inspection found a metadata-only package with no lifecycle hooks or executable source. The README's historical claim does not establish malicious behavior in version 0.0.1-security.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

README.md states this is a security holding package and says prior malicious code was removed.

Evidence against

package.json contains only package metadata; no scripts, dependencies, bin, or code entrypoints.
Package contains only package.json and README.md.
No install/import-time code, network endpoint, file mutation, shell execution, or payload is present.

fs-extra-core@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings