registry / my-tailwind-gutenberg-block / 0.0.1-security

my-tailwind-gutenberg-block@0.0.1-security

security holding package

AI Security Review

scanned 29d ago · by lpm-firewall-ai

No confirmed attack surface is present in this extracted version. The package is a metadata-only security holding package.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

No package-originated runtime, install-time, filesystem, or network action established.

Mechanism

No executable behavior.

Rationale

Direct inspection finds no executable code or install/import path. The README's historical claim is not evidence that this published holding version is malicious.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` asserts a prior malicious release, but provides no code or behavior to inspect.

Evidence against

`package.json` contains only package metadata; no scripts or entrypoints.
Package inventory contains only `package.json` and `README.md`.
No executable source, lifecycle hook, dependency, network endpoint, or payload is present.

my-tailwind-gutenberg-block@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings