registry / streak-daycount / 0.0.1-security

streak-daycount@0.0.1-security

security holding package

AI Security Review

scanned 24d ago · by lpm-firewall-ai

No confirmed attack surface in this package version. It is a metadata-only security placeholder.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

No package-originated impact established.

Mechanism

No executable behavior.

Rationale

Direct inspection found no executable code or lifecycle configuration. The README describes historical removal of malicious code, not active behavior in 0.0.1-security.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

README.md states this is a security holding package replacing a previously removed package.

Evidence against

package.json contains only metadata; no scripts, entrypoints, dependencies, or bin.
Only package files are package.json and README.md.
No executable source, install hook, network endpoint, or file/process operation is present.

streak-daycount@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings