registry / nodemon-web / 0.0.1-security

nodemon-web@0.0.1-security

security holding package

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed attack surface exists in the inspected package. The package is a metadata-only holding package with an informational README.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No package-originated execution, persistence, exfiltration, or mutation established.

Mechanism

No executable package behavior

Rationale

Direct inspection found no executable source or lifecycle hooks. The README's historical claim is uncorroborated and does not establish malicious behavior in this package version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` states this is a security holding package and claims prior code was removed; this is not executable evidence.

Evidence against

`package.json` contains only name, version, description, and repository metadata.
`package.json` defines no lifecycle scripts or executable entrypoints.
Package contains only `package.json` and informational `README.md`.

nodemon-web@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code