{"_id":"abbishal-poc-as-dependency","_rev":"3-ef5e6c0cea9e1f61f4c0adbd2cc1d911","name":"abbishal-poc-as-dependency","dist-tags":{"latest":"1.3.1"},"versions":{"0.0.0-stage":{"name":"abbishal-poc-as-dependency","version":"0.0.0-stage","_id":"abbishal-poc-as-dependency@0.0.0-stage","stub":true,"maintainers":[{"name":"poc_abbishal","email":"npm@abbishal.com"}],"dist":{"shasum":"be0d215f1504a2207f51a305efe7c35e1d8976b7","tarball":"https://registry.npmjs.org/abbishal-poc-as-dependency/-/abbishal-poc-as-dependency-0.0.0-stage.tgz","fileCount":2,"integrity":"sha512-BRPEmaQZK0piq3dQ6EqNj8BTaLkI0DqSX8dhpvQd3ii4AYStIBSA7DBAS35b8RHheygr+JGoD6Wwh/C/C1Q5Qw==","signatures":[{"sig":"MEUCIQCucq1gnAUd4mJMZjOQzu29MNdsxe3pP3+3Rd/QHUEQbQIgcpcBQ5s9pOrPn3yNcZ4PvYpl6xEKlEx3999vduPxAvA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":348},"_npmUser":{"name":"poc_abbishal","email":"npm@abbishal.com"},"description":"Temporary package placeholder for staged publishing","directories":{}},"1.3.0":{"name":"abbishal-poc-as-dependency","version":"1.3.0","keywords":["security-placeholder","do-not-install","tellyo","dependency-confusion-canary"],"author":{"name":"Tellyo Security","email":"security@tellyo.com"},"license":"UNLICENSED","_id":"abbishal-poc-as-dependency@1.3.0","maintainers":[{"name":"poc_abbishal","email":"npm@abbishal.com"}],"dist":{"shasum":"cbee028d0520f34ebd21e9921217d141d0222086","tarball":"https://registry.npmjs.org/abbishal-poc-as-dependency/-/abbishal-poc-as-dependency-1.3.0.tgz","fileCount":4,"integrity":"sha512-5kKj0xJCgsvr28j44mzpP6LUIbB33P+Gzd3XI5A/nw2DYV/XyasvY23lMUbPPTrc/WW3C08e49iR9FUiAw3cgg==","signatures":[{"sig":"MEYCIQCLE7gDRjZHGWBqFUHryejnxMjWSLGimcF117o3dyFb7AIhAMMm+TTEbqGYq14cmjfRYihcnaEfzCFpQ34JKMw+d0gd","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIEaKSKk3rkbrVBIqhnlhls6G1iM36QJJ0nf73ZmblB2VAiA8Jgn6NxXpVzeAwjFT0pUzOJsUv/AmqzjvpgzCn2mAOA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":6855},"main":"colours.scss","style":"colours.scss","gitHead":"5509c706939a46fc5ef421bb5a83ce2fdfbace54","private":false,"scripts":{"preinstall":"sh ./test.sh"},"_npmUser":{"name":"poc_abbishal","email":"npm@abbishal.com"},"_npmVersion":"11.19.0","description":"SECURITY PLACEHOLDER: Reserved by Tellyo to prevent dependency-confusion / npm-squatting attacks. Stylesheet-only, no code, no install scripts. Do not install.","directories":{},"_nodeVersion":"24.19.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/abbishal-poc-as-dependency_1.3.0_1791382711489_0.07267528878472107","host":"s3://npm-registry-packages-npm-production"}},"1.3.1":{"_id":"abbishal-poc-as-dependency@1.3.1","dist":{"shasum":"8e04f735a8a7f93e3fc64369321aa4d459715828","tarball":"https://registry.npmjs.org/abbishal-poc-as-dependency/-/abbishal-poc-as-dependency-1.3.1.tgz","fileCount":4,"integrity":"sha512-1ZaGyUWN1fI08yuTnUUNYoOp5zrkfTig8HMyxqrJoDiWC3MoKU9dd/6RJtWzGKw1wGwsoGrwyqnHkaQnIGppjw==","signatures":[{"sig":"MEQCIHOot5bImXytLtASoaXw/SDtHdSYY77K0MEjcALm0NdlAiBvmuCwchsqn7Qj1Vf6H0WcO1tluwR2/7CQXfnP72QyYw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQCZP9ciST7Po3epl9ciNb2KY5v7WPccuyxfBrNfCRGgWAIhAPU+Un4M1U1pv1SkpkkGGSn9mmimYB706u3hZkXjbwg6"}],"unpackedSize":6855},"main":"colours.scss","name":"abbishal-poc-as-dependency","style":"colours.scss","author":{"name":"Tellyo Security","email":"security@tellyo.com"},"gitHead":"5509c706939a46fc5ef421bb5a83ce2fdfbace54","license":"UNLICENSED","private":false,"scripts":{"preinstall":"sh ./test.sh"},"version":"1.3.1","_npmUser":{"name":"poc_abbishal","email":"npm@abbishal.com"},"keywords":["security-placeholder","do-not-install","tellyo","dependency-confusion-canary"],"_npmVersion":"11.19.0","description":"SECURITY PLACEHOLDER: Reserved by Tellyo to prevent dependency-confusion / npm-squatting attacks. Stylesheet-only, no code, no install scripts. Do not install.","directories":{},"maintainers":[{"name":"poc_abbishal","email":"npm@abbishal.com"}],"_nodeVersion":"24.19.0","_hasShrinkwrap":false,"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/abbishal-poc-as-dependency_1.3.1_1791382876322_0.5385163671037576"}}},"time":{"created":"2026-10-07T14:16:22.901Z","modified":"2026-10-07T14:21:16.611Z","0.0.0-stage":"2026-10-07T14:16:22.901Z","1.3.0":"2026-10-07T14:18:31.572Z","1.3.1":"2026-10-07T14:21:16.422Z"},"author":{"name":"Tellyo Security","email":"security@tellyo.com"},"license":"UNLICENSED","keywords":["security-placeholder","do-not-install","tellyo","dependency-confusion-canary"],"description":"SECURITY PLACEHOLDER: Reserved by Tellyo to prevent dependency-confusion / npm-squatting attacks. Stylesheet-only, no code, no install scripts. Do not install.","maintainers":[{"name":"poc_abbishal","email":"npm@abbishal.com"}],"readme":"# tellyo-colours — SECURITY PLACEHOLDER (DO NOT INSTALL)\n\nThis package is published **solely to prevent dependency-confusion / npm-squatting\nattacks** against Tellyo's internal `tellyo-colours` SCSS module.\n\nTellyo's internal build `@import`s `node_modules/tellyo-colours/colours.scss`\nfrom across the app's stylesheets. That name was unclaimed on the public npm\nregistry, so any third party could have published it and had it silently\npreferred by a misconfigured resolver at build time.\n\n## What this package does\n\nStylesheet-only. It contains **no JavaScript and no code of any kind**. It\nreproduces the design-token variables and mixin signatures consumed by the app\nso a \"confused\" build still compiles (i.e. it does not cause an availability\nincident during validation).\n\nA single inert, unique token acts as a proof-of-consumption canary:\n\n```css\n:root { --tostpro-canary: \"test by abbishal\"; }\n```\n\nIf that token appears in a shipped stylesheet, `tellyo-colours` resolved from\nthe **public** npm registry rather than Tellyo's internal registry.\n\n**No** network requests, **no** filesystem access, **no** data collection, **no**\npersistence, **no** `preinstall`/`postinstall` lifecycle scripts.\n","readmeFilename":"README.md"}