@factoryz/apollo@99.9.1

Analysis

@factoryz/apollo@99.9.1 is an empty stub package: its only code is a 35-byte index.js that exports an empty object, it declares no lifecycle scripts, no bin entries and no repository, and it carries the sentinel version 99.9.1. Its sole functional content is a dependency entry that resolves to a tarball hosted outside the npm registry: "ltidisafe": "hxxps://ltidi[.]storage[.]googleapis[.]com/depenconf/ltidisafe-3[.]8[.]7[.]tgz". Installing this package therefore fetches and installs code from a Google Cloud Storage bucket rather than the registry, bypassing registry integrity checks and audit trails, and the referenced payload is not included in this tarball. The package's only purpose is to pull that off-registry artifact into a dependent's install tree.