registry / streak-calendar / 0.0.1-security

streak-calendar@0.0.1-security

security holding package

AI Security Review

scanned 24d ago · by lpm-firewall-ai

No confirmed attack surface in this package version. It has no lifecycle hooks, runtime entrypoints, or executable code.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No package-originated execution, file access, or network activity established.

Mechanism

Metadata-only holding package

Rationale

Direct inspection found only a metadata manifest and a holding-package README. No executable behavior or attack primitive exists in streak-calendar@0.0.1-security.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json contains only package metadata; no scripts or entrypoints.
README.md describes this version as a security holding package.
Package contains only README.md and package.json; no executable source or payload files.

Behavioral surface

streak-calendar@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings