registry / oem-agentic-shared / 0.0.1-security

oem-agentic-shared@0.0.1-security

security holding package

AI Security Review

scanned 10d ago · by lpm-firewall-ai

No confirmed executable attack surface. The package contains only metadata and a README placeholder notice.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No package-originated code execution, persistence, harvesting, or exfiltration identified.

Mechanism

No executable behavior

Rationale

The inspected `0.0.1-security` package is inert and contains no executable source or lifecycle hooks. Its README's historical claim does not establish malicious behavior in this packaged version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

`package.json` contains only package metadata; no scripts, entrypoints, dependencies, or binaries.
`README.md` describes this version as a security placeholder.
Package contents are limited to `package.json` and `README.md`.
No install-time/import-time code, network endpoint, file mutation, or payload exists in inspected files.

oem-agentic-shared@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings