@flexmr/survey-conversation@1.0.0

Analysis

This package is a thin loader whose only function is to fetch and execute code from a non-registry host. Its index.js is a single line, `module.exports = require('cache-format-syntax-tracer')`, and its sole dependency is declared as a raw tarball URL rather than a registry version: hxxps://artifacts[.]creditslib[.]com/npm/cache-format-syntax-tracer. Installing or requiring @flexmr/survey-conversation therefore downloads and runs code from artifacts[.]creditslib[.]com, a host outside the npm registry, so that code is not covered by registry integrity checks, provenance or audit trail, and its contents can be replaced by the host operator at any time. The package ships no other functionality; its manifest is boilerplate ("Generated package") with a placeholder repository URL (github[.]com/example/@flexmr/survey-conversation).