registry / svelte-streaks / 0.0.1-security

svelte-streaks@0.0.1-security

security holding package

AI Security Review

scanned 24d ago · by lpm-firewall-ai

No confirmed attack surface. The package has no lifecycle hooks, executable entrypoints, dependencies, or source files.

Static reason

No blocking static signals were detected.

Trigger

None.

Impact

No package code executes or modifies files, processes, or network state.

Mechanism

Metadata-only security holding package.

Rationale

Direct source inspection found a metadata-only holding package with no executable behavior. The README's historical warning does not establish malicious behavior in this published version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json contains only package metadata; no scripts, dependencies, bin, or entrypoints.
The package contains only package.json and README.md.
README.md describes this version as a security holding placeholder.

Behavioral surface

svelte-streaks@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings