security holding package
0%
Total Score
50
50
50
The artifact contains only README.md and package.json, confirming that it is a placeholder rather than a usable implementation.
The README states that the package contained malicious code, was removed by npm security, and was replaced with a placeholder; this release is therefore not a functional dependency.
No build attestation, trusted publisher, or staged-publishing evidence is present, so the placeholder's publication cannot be independently verified.
No declared license or license file was found, leaving reuse and distribution terms unclear.
The package has had no releases in the last 12 months, and its latest release is the security placeholder; this provides no evidence of active, usable maintenance.
No maintainer information available.
No direct dependencies.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.