LPM Firewall

Threat feed How it works Policy

Loading npm security reports…

LPM Firewall

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 1 low-signal pattern(s) reviewed.

View on npm All versions

registry / oem-agentic-shared / 0.0.1-security

oem-agentic-shared@0.0.1-security

security holding package

AI Security Review

scanned 10d ago · by lpm-firewall-ai

No confirmed executable attack surface. The package contains only metadata and a README placeholder notice.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No package-originated code execution, persistence, harvesting, or exfiltration identified.

Mechanism

No executable behavior

Rationale

The inspected `0.0.1-security` package is inert and contains no executable source or lifecycle hooks. Its README's historical claim does not establish malicious behavior in this packaged version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

`package.json` contains only package metadata; no scripts, entrypoints, dependencies, or binaries.
`README.md` describes this version as a security placeholder.
Package contents are limited to `package.json` and `README.md`.
No install-time/import-time code, network endpoint, file mutation, or payload exists in inspected files.

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 Low

LowNo License

99%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

Version0.0.1-security

PublishedJul 10, 2026

Licensenone

Dependencies0

Integrityverified

Package size400 B

Files2

Runtime surface

package.json

EntrypointsNo public entrypoints declared.

RuntimeNo engine / OS / CPU constraints

Artifact442 B · 2 files1 signature(s)

Install lifecycleNo scripts declared.

Behavioral surface

Source: cleanSupply chain: cleanNoLicense

LPM CLI

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

oem-agentic-shared: Clean npm security report (Allow) | LPM Firewall