safe-audit
v0.0.1
Published
Reserved placeholder. Defensively published to hold the bare npm name `safe-audit` so it cannot be squatted. Not a functional package — do not depend on it.
Maintainers
Readme
safe-audit (reserved placeholder)
This package is not functional. It exists only to hold the bare npm name
safe-audit so that name cannot be registered by a third party.
Why
An earlier version of the safe
package-install gate built an audit command as
npx --yes safe-audit package-audit … inside a sandbox. That name was never
published by the gate's authors, so the fetch always failed harmlessly — but
had anyone registered safe-audit on npm, the gate would have fetched and run
their code. The gate no longer references this name; this placeholder holds it
so the vector cannot be reopened.
Do not depend on this
It emits nothing to stdout, returns no verdict, and exits 0. If you were looking for a security auditing tool, this is not it.
