No concrete attack was identified in the two package files. The remote dependency declaration alone does not establish malicious behavior.
package.json has no install lifecycle hooks; its only script is a placeholder test command.
package.jsonView on unpkg · L5Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkgindex.js exports an empty object and performs no other runtime behavior.
index.jsView on unpkg · L2This report applies to unified-platform@99.9.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Source advisory published: .
Package manifest contains a dependency pinned to a remote tarball URL.
package.jsonView on unpkg · L6package.json has no install lifecycle hooks; its only script is a placeholder test command.
package.jsonView on unpkg · L5index.js exports an empty object and performs no other runtime behavior.
index.jsView on unpkg · L2