@specora/api — defensive placeholder for @specora/sdk

This package is a defensive placeholder. It contains no real code. It exists to reserve the @specora/api name on npm so an attacker cannot register it and ship credential-stealing malware to anyone who fat-fingers an npm install.

Did you mean @specora/sdk?

Almost certainly, yes.

npm uninstall @specora/api
npm install @specora/sdk

The canonical Specora Platform SDK for Node.js lives at @specora/sdk. Docs: docs.specora.ai/sdk/node.

Why this exists

Reserving predictable typo names of a security-sensitive SDK is an established defensive pattern. See npm's threats and mitigations guide and the OWASP NPM Security Cheat Sheet.

If you require this package, it throws immediately with a message pointing you at @specora/sdk — the throw is the protection.

License

MIT