tailwindcss-3d-styles@1.2.3: Clean npm security report (Allow)

AI Security Review

scanned 17h ago · by lpm-firewall-ai

No confirmed attack surface is established. The package is a Tailwind CSS plugin and has no install hook, network code, file access, or command execution.

Static reason

No blocking static signals were detected.

Trigger

A consumer enables the plugin in Tailwind configuration.

Impact

Generates CSS configuration only.

Mechanism

Registers 3D CSS utilities and animation theme values.

Rationale

Direct inspection found a conventional Tailwind plugin with no lifecycle scripts or suspicious runtime primitives. No malicious behavior was identified.

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

The manifest has no lifecycle scripts or self-dependency.
The entry point is a Tailwind plugin that registers CSS transform utilities and animations.

Evidence against

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 23 file(s), 57.7 KB of source

Source & flagged code

2 flagged

package.jsonView file

15"peerDependencies": { "tailwindcss": ">=3.2.0 <4.0.0" }, "dependencies": { "@swc/helpers": "0.5.17", "lodash": "4.17.21" }, "main": "index.js", "types": "types/index.d.ts"

Low

Suspicious Lifecycle Evidence

The manifest has no lifecycle scripts or self-dependency.

package.jsonView on unpkg · L15

index.jsView file

1"use strict";var _interop_require_default=require("@swc/helpers/_/_interop_require_default"),_object_spread=require("@swc/helpers/_/_object_spread"),_plugin=_interop_require_default._(require("tailwindcss/plugin")),_cssanimations=require("./css-animations"),_cssutilities=require("./css-utilities")

Low

Ai Review Evidence

The entry point is a Tailwind plugin that registers CSS transform utilities and animations.

index.jsView on unpkg · L1

Source & flagged code

2 flagged · loading source

package.jsonView file

15"peerDependencies": { "tailwindcss": ">=3.2.0 <4.0.0" }, "dependencies": { "@swc/helpers": "0.5.17", "lodash": "4.17.21" }, "main": "index.js", "types": "types/index.d.ts"

Low

Suspicious Lifecycle Evidence

The manifest has no lifecycle scripts or self-dependency.

package.jsonView on unpkg · L15

index.jsView file

1"use strict";var _interop_require_default=require("@swc/helpers/_/_interop_require_default"),_object_spread=require("@swc/helpers/_/_object_spread"),_plugin=_interop_require_default._(require("tailwindcss/plugin")),_cssanimations=require("./css-animations"),_cssutilities=require("./css-utilities")

Low

Ai Review Evidence

The entry point is a Tailwind plugin that registers CSS transform utilities and animations.

index.jsView on unpkg · L1

Findings

2 Low

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidenceindex.js