registry / ishowfeet11 / 0.0.1-security

ishowfeet11@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface in the extracted package. It is metadata and a holding-package README only.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No observed install-time or runtime impact

Mechanism

No executable package behavior

Rationale

The inspected 0.0.1-security archive contains no executable code or lifecycle entrypoints. The README's historical claim does not establish malicious behavior in this package version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

README.md states this is a security holding package for previously removed code.

Evidence against

package.json has no scripts, bin, main, module, browser, or dependencies.
Only package.json and README.md exist; neither contains executable source.
No install-time hooks, network endpoints, file writes, shell execution, or payload loaders are present.

ishowfeet11@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code