registry / indexed-btree / 2.1.3

indexed-btree@2.1.3

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface. The package is a local in-memory data-structure library with local module imports only.

Static reason

No blocking static signals were detected.

Trigger

Consumer imports and calls BTree APIs.

Impact

No package-originated file, process, credential, persistence, or network behavior established.

Mechanism

In-memory sorted key-value storage and set operations.

Rationale

Direct inspection shows no lifecycle execution or malicious capability; runtime code performs only local B+ tree operations. Repository URLs in package metadata are not runtime endpoints.

Evidence

package.jsonb+tree.jsextended/index.jssorted-array.js

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall, install, postinstall, prepare, or bin entrypoints.
b+tree.js implements an in-memory B+ tree and exports data-structure APIs.
extended/index.js only imports local tree/set-operation modules.
Source scan found no filesystem, environment, child-process, eval, or network API use.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Minified

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 206 KB of source

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 Low

LowScripts Present