registry / tailwindcss-form-styles / 0.5.14

tailwindcss-form-styles@0.5.14

AI Security Review

scanned 9h ago · by lpm-firewall-ai

No confirmed malicious attack surface. Package installation has no lifecycle hook, and its runtime entry configures Tailwind form styles.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

A consumer loads the Tailwind plugin; release helpers run only through explicit npm scripts.

Impact

No unconsented file mutation, network activity, persistence, or code execution was found.

Mechanism

Tailwind style configuration and local release metadata parsing.

Rationale

Direct inspection shows a Tailwind styling plugin with optional local release helpers. The environment-variable and local-file findings are package-aligned and do not establish an attack chain.

Evidence

package.jsonsrc/index.jsscripts/release-notes.jsscripts/release-channel.jsCHANGELOG.md

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

The manifest has no npm lifecycle hooks.
The runtime entry exports a Tailwind form-style plugin.
No network, shell, dynamic-code, or credential-harvesting behavior was found.

tailwindcss-form-styles@0.5.14

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code