registry / tailwindcss-form-styles / 0.5.12

tailwindcss-form-styles@0.5.12

AI Security Review

scanned 13h ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. The package exports a Tailwind styling plugin and has no install-time lifecycle command.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A user configures Tailwind to load the plugin.

Impact

Applies local styling rules only; no credential access, network request, persistence, or destructive action was found.

Mechanism

Registers CSS form-control style rules through the Tailwind plugin API.

Rationale

Source inspection found a CSS-focused Tailwind plugin with no lifecycle hooks, network behavior, shell execution, payload loading, or data collection. The environment-variable and file-read findings are limited to explicitly invoked release helpers.

Evidence

package.jsonsrc/index.jsscripts/release-channel.jsscripts/release-notes.jstailwind.config.js

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

The manifest has no npm lifecycle hook; its entry point is src/index.js.
The entry point only registers Tailwind form-style rules and exports the plugin.

tailwindcss-form-styles@0.5.12

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code