AI called this Clean at 99.0% confidence as Benign with low false-positive risk.
Evidence against
- package.json has no scripts, entrypoints, dependencies, or executable metadata.
- README.md describes this release as a security holding placeholder.
- Package contains only README.md and package.json; neither contains runtime code or install hooks.
- No network, filesystem, shell, dynamic-loading, or credential-handling code was found.
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainNo supply-chain packaging signals triggered.
scanned 0 file(s), 0 B of source