registry / node-fsagent / 4.685.86

node-fsagent@4.685.86

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed executable attack surface. The package has an empty entry file and a metadata-only manifest; opaque keyword data is not activated by package code.

Static reason

No blocking static signals were detected.

Trigger

None established; installation and import expose no package-defined execution path.

Impact

No confirmed impact.

Mechanism

inert manifest metadata only

Rationale

The unusual encoded keyword strings are inert because this package contains no lifecycle hook, executable entrypoint, dependency, or decoding/execution code. Static source inspection establishes no malicious behavior.

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json contains 274 opaque base64-like keyword strings.

Evidence against

index.js is empty (0 bytes).
package.json has no scripts, main/module/browser/bin, or dependencies.
Only package files are package.json and index.js.
No source references network, subprocesses, eval, file writes, or environment data.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 0 B of source

Source & flagged code

1 flagged

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json contains 274 opaque base64-like keyword strings.

package.jsonView on unpkg

Source & flagged code

1 flagged · loading source

package.jsonView file

•Published source reference

Low

Ai Review Evidence

package.json contains 274 opaque base64-like keyword strings.

package.jsonView on unpkg

Findings

1 Low

LowAi Review Evidencepackage.json