registry / node-fsagent / 4.685.73

node-fsagent@4.685.73

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed attack surface is established. The package contains metadata only and has no install-time or runtime code path.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No source-backed capability to execute, persist, exfiltrate, or modify files.

Mechanism

inert package metadata

Rationale

Direct inspection shows an inert package: no scripts, no entrypoint, and an empty JavaScript file. Opaque keyword metadata alone cannot execute and does not establish malicious behavior.

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json contains 274 opaque keyword strings, but no executable reference uses them.

Evidence against

package.json has only name, version, license, description, and keywords.
package.json defines no lifecycle scripts, entrypoints, bin, or dependencies.
index.js exists but is empty (0 bytes).
No executable files, symlinks, network URLs, shell APIs, credential access, or encoded runtime loader were found.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 0 B of source

Source & flagged code

1 flagged

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json contains 274 opaque keyword strings, but no executable reference uses them.

package.jsonView on unpkg

Source & flagged code

1 flagged · loading source

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json contains 274 opaque keyword strings, but no executable reference uses them.

package.jsonView on unpkg

Findings

1 Low

LowAi Review Evidencepackage.json