registry / node-fsagent / 4.685.75

node-fsagent@4.685.75

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed executable attack surface is present. Opaque keyword metadata is inert and has no consuming code.

Static reason

No blocking static signals were detected.

Trigger

None; package installation and import have no package-defined execution path.

Impact

No confirmed code execution, persistence, collection, or exfiltration.

Mechanism

Manifest metadata only; empty JavaScript file.

Rationale

The package contains only metadata and an empty JavaScript file, with no lifecycle or runtime entrypoint. The opaque keywords are suspicious-looking but inert without code that decodes or uses them.

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json contains 274 opaque base64-like keyword strings.

Evidence against

package.json has no scripts or lifecycle hooks.
package.json declares no main, module, browser, or bin entrypoint.
index.js is empty.
Only package.json and index.js are packaged.
No dependencies, URLs, credential access, filesystem actions, or child-process code are present.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 0 B of source

Source & flagged code

1 flagged

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json contains 274 opaque base64-like keyword strings.

package.jsonView on unpkg

Source & flagged code

1 flagged · loading source

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json contains 274 opaque base64-like keyword strings.

package.jsonView on unpkg

Findings

1 Low

LowAi Review Evidencepackage.json