AI called this Clean at 99.0% confidence as Benign with low false-positive risk.
Evidence against
- package.json has no scripts or executable entrypoints.
- Package contains only package.json and README.md.
- No source code, dependencies, network calls, or install hooks found.
Behavioral surface
SourceNo risky source behavior triggered.
Supply chainNo supply-chain packaging signals triggered.