registry / gs-uitk-testing-utils / 0.0.1
gs-uitk-testing-utils@0.0.1
Defensive name reservation for a HackerOne security report. Not a functional package. Contains no code. Goldman Sachs: this name is available for transfer on request.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe README's self-description is not trusted, but direct inspection shows no executable source, lifecycle hook, dependency, or entry point. No concrete malicious behavior is present.
Static reason
No blocking static signals were detected.
Trigger
None.
Impact
No code is available to run, modify files, or contact a network endpoint.
Mechanism
No executable package behavior.
AI rationale
The README's self-description is not trusted, but direct inspection shows no executable source, lifecycle hook, dependency, or entry point. No concrete malicious behavior is present.
Evidence
package.jsonREADME.md
Decision evidence
public snapshotAI called this Clean at 98.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- README makes an untrusted security-report and proof-of-concept claim.
Evidence against
- The manifest has no lifecycle scripts, dependencies, executable entry points, or code files; it publishes only README.md.
- The package contains only package.json and README.md, with no network, shell, file-write, or import-time behavior.
Behavioral surface
Source & flagged code
2 flagged · loading sourceREADME.mdView file
9It is reserved here as a proof of concept for a security report filed with Goldman Sachs through
HackerOne by `musty312`. The version is deliberately `0.0.1` so that it cannot be selected by any
semantic-version range and cannot displace the package of the same name inside Goldman's own
build.
Low
Ai Review Evidence
README makes an untrusted security-report and proof-of-concept claim.
README.mdView on unpkg · L9package.jsonView file
2"name": "gs-uitk-testing-utils",
"version": "0.0.1",
"description": "Defensive name reservation for a HackerOne security report. Not a functional package. Contains no code. Goldman Sachs: this name is available for transfer on request.",
"license": "MIT",
"keywords": ["security", "name-reservation", "do-not-use"],
"files": ["README.md"],
"author": "musty312 (HackerOne)"
Low
Ai Review Evidence
README makes an untrusted security-report and proof-of-concept claim.
package.jsonView on unpkg · L2Findings
2 Low
LowAi Review EvidenceREADME.md
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to gs-uitk-testing-utils@0.0.1.
See all versions of gs-uitk-testing-utils for other recorded verdicts.
- Review the evidence and your use of gs-uitk-testing-utils@0.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.