registry / nodemon-sudo / 0.0.1-security

nodemon-sudo@0.0.1-security

security holding package

AI Security Review

scanned 12d ago · by lpm-firewall-ai

No confirmed attack surface is present in this placeholder package. It contains only metadata and a README, with no executable entrypoints or install-time hooks.

Static reason

No blocking static signals were detected.

Trigger

none

Impact

none

Mechanism

security holding package metadata only

Rationale

Direct source inspection found no executable code or lifecycle hooks, only a security holding package manifest and README. The historical removal notice does not make this published placeholder version malicious.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no scripts, bin, main, module, browser, dependencies, or lifecycle hooks.
Only package.json and README.md are present in the extracted package.
README.md identifies this as an npm security holding package placeholder.
No child_process, eval, dynamic loading, file writes, credential access, or network code found.

nodemon-sudo@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings