registry / ishowfeet14 / 0.0.1-security

ishowfeet14@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface exists in the inspected package contents. It is a metadata-only security holding package.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

None established.

Mechanism

No executable behavior.

Rationale

Direct inspection found only metadata and a security-holder README, with no executable files or install/runtime hooks. The current package version is clean despite the README's historical note about a removed prior package.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

`package.json` contains only package metadata; no scripts or entrypoints.
`README.md` identifies this as an npm security holding placeholder.
Package contains only `package.json` and `README.md`; no executable source or binaries.
No lifecycle hooks, network endpoints, file writes, or runtime code found.

ishowfeet14@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code