registry / helix-deploy / 0.0.1-security

helix-deploy@0.0.1-security

security holding package

AI Security Review

scanned 23d ago · by lpm-firewall-ai

No confirmed attack surface: the package contains only metadata and a README. No install-time or runtime code is declared.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

None established.

Mechanism

No executable behavior.

Rationale

Direct inspection found no lifecycle hook, entrypoint, dependency, executable source, network use, or filesystem mutation. The README's historical statement is not evidence of malicious behavior in this package version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no scripts, dependencies, or executable entrypoints.
Only package files are package.json and README.md.
README.md describes this version as a security placeholder; it contains no executable content.

Behavioral surface

Source

helix-deploy@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings