registry / webpack-cache-reset / 0.0.1-security

webpack-cache-reset@0.0.1-security

security holding package

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed attack surface is present in this published package version. It has no lifecycle hooks, runtime entrypoints, or executable payload files.

Static reason

No blocking static signals were detected.

Trigger

None

Impact

No package behavior executes or modifies data.

Mechanism

Metadata-only holding package

Rationale

Static inspection shows `webpack-cache-reset@0.0.1-security` is a metadata-only holding package. The README's historical claim is not evidence of malicious behavior in the inspected source.

Evidence

package.jsonREADME.md

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

`README.md` claims this is a security holding package for a formerly malicious package, but provides no executable evidence.

Evidence against

`package.json` contains only package metadata; no lifecycle scripts or entrypoints.
Package root contains only `package.json` and `README.md`; no executable source, binaries, or install hooks.

webpack-cache-reset@0.0.1-security

AI Security Review

Decision evidence

Source & flagged code

Findings