registry / true / 0.0.1-security

true@0.0.1-security

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed attack surface exists in the extracted package. It is a manifest-only security holding package with documentation.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

None established

Mechanism

No executable behavior

Rationale

Direct inspection found no executable package content or lifecycle behavior. The README describes a placeholder, not an active payload.

Evidence

package.jsonREADME.md

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

Package contains only package.json and README.md.
package.json has no scripts, bin, main, module, or browser entrypoints.
No executable source, dependencies, network code, or install-time hooks are present.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 0 file(s), 0 B of source

0 flagged

No flagged code excerpts are attached to this scan.

0 flagged · loading source

No flagged code excerpts are attached to this scan.

2 Low

LowNo License

LowAi Review Evidence