registry / streak-bucket-lib / 0.0.1-security

streak-bucket-lib@0.0.1-security

security holding package

AI Security Review

scanned 22d ago · by lpm-firewall-ai

No confirmed attack surface exists in this release. It contains only a minimal manifest and holding-package README.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

None observed

Mechanism

No executable package behavior

Rationale

Direct inspection found no executable code or lifecycle hooks. The README describes this version as a placeholder after removal of prior malicious code, not malicious behavior in this package version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no scripts, entrypoints, dependencies, or bin.
Package contains only package.json and README.md.
README identifies this release as a security holding placeholder.
No executable source, network calls, or install/import-time behavior found.

Behavioral surface

streak-bucket-lib@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings