{"_id":"@coworker-jp/aidr-test","name":"@coworker-jp/aidr-test","dist-tags":{"latest":"0.0.1"},"versions":{"0.0.1":{"name":"@coworker-jp/aidr-test","version":"0.0.1","description":"Harmless npm package used to verify that AI-coding-agent supply-chain scanners block known-unsafe install attempts.","keywords":["security","supply-chain","test","eicar","ai-coding-agent"],"license":"Apache-2.0","author":{"name":"coworker-jp"},"repository":{"type":"git","url":"git+https://github.com/coworker-jp/ai-scanner.git","directory":"packages/aidr-test"},"scripts":{"postinstall":"node ./postinstall.js"},"engines":{"node":">=18"},"publishConfig":{"access":"public"},"_id":"@coworker-jp/aidr-test@0.0.1","gitHead":"146f1c9e17097f5ea32240e2d9bb25312f2ace92","bugs":{"url":"https://github.com/coworker-jp/ai-scanner/issues"},"homepage":"https://github.com/coworker-jp/ai-scanner#readme","_nodeVersion":"20.20.2","_npmVersion":"10.8.2","dist":{"integrity":"sha512-s1gnCADODUHbfZCUeqL5WEGTMF9ylSPBYkYOerD/o5ipubvVnLcs3QxAYZnV7Ko22zlxY8guOknmXzMPsd643Q==","shasum":"5645e120b7db4f265afb0ab3ca607273dd2e1271","tarball":"https://registry.npmjs.org/@coworker-jp/aidr-test/-/aidr-test-0.0.1.tgz","fileCount":3,"unpackedSize":2656,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIHH8etjEfUVi4V6SlaUmdyX6rwqYYHzxLnzh6YR3tt2mAiEAzM/T6opWKssEmFU0dcU3wiRCDUnx64OWJR717FrsfHU="}]},"_npmUser":{"name":"coworker-jp","email":"tatsuya@coworker.co.jp"},"directories":{},"maintainers":[{"name":"coworker-jp","email":"tatsuya@coworker.co.jp"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/aidr-test_0.0.1_1777291729454_0.5732082649079517"},"_hasShrinkwrap":false}},"time":{"created":"2026-04-27T12:08:49.373Z","0.0.1":"2026-04-27T12:08:49.597Z","modified":"2026-04-27T12:08:49.853Z"},"maintainers":[{"name":"coworker-jp","email":"tatsuya@coworker.co.jp"}],"description":"Harmless npm package used to verify that AI-coding-agent supply-chain scanners block known-unsafe install attempts.","homepage":"https://github.com/coworker-jp/ai-scanner#readme","keywords":["security","supply-chain","test","eicar","ai-coding-agent"],"repository":{"type":"git","url":"git+https://github.com/coworker-jp/ai-scanner.git","directory":"packages/aidr-test"},"author":{"name":"coworker-jp"},"bugs":{"url":"https://github.com/coworker-jp/ai-scanner/issues"},"license":"Apache-2.0","readme":"# @coworker-jp/aidr-test\n\nA harmless dummy package used to verify that AI-coding-agent supply-chain\nscanners correctly block a package flagged as unsafe.\n\nThis package intentionally contains **no runtime code, no network calls, and\nno file operations**. Installing it only prints a short notice from\n`postinstall.js`. It is safe to install on any machine, but a properly\nconfigured scanner should prevent the install from ever completing.\n\n## How to use\n\nIn a project where your AI coding agent (Claude Code, Cursor, Windsurf, etc.)\nhas a supply-chain scanner enabled, ask the agent to run:\n\n```\nnpm install @coworker-jp/aidr-test\n```\n\n### Expected result\n\nThe scanner should refuse the install and show a security warning. The exact\nwording depends on the scanner you use.\n\n### If the install succeeds\n\nIf you see the `@coworker-jp/aidr-test` postinstall notice in your\nterminal, the scanner did not block the request. Re-check that the scanner is\ninstalled and that its hooks are active, then try again.\n\n## Safety\n\n- No dependencies.\n- `postinstall.js` only calls `process.stdout.write()` on a static string.\n- `files` is restricted to `postinstall.js` and `README.md`; nothing else is\n  packed.\n\n## License\n\nApache-2.0\n","readmeFilename":"README.md","_rev":"1-9e3cb4f914320f020f576f97543791d4"}