registry / vue-demi-fix / 0.0.1-security

vue-demi-fix@0.0.1-security

security holding package

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

No confirmed attack surface. The manifest defines metadata only, and no executable package files or lifecycle hooks exist.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

None established

Mechanism

No executable behavior

Rationale

Direct inspection found a metadata-only holding package with no install-time or runtime code. The README's historical notice does not create active behavior in this version.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no scripts, entrypoints, dependencies, or executable configuration.
Package contains only package.json and README.md.
README.md identifies this release as a security holding placeholder.

Behavioral surface

SourceNo risky source behavior triggered.

vue-demi-fix@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code