@dreamguyxeon/libsignal-node@0.0.0-stage

Analysis

@dreamguyxeon/libsignal-node@0.0.0-stage is an inert placeholder publish that reserves a name impersonating the unscoped libsignal-node package under an unofficial scope. The tarball contains only two files, package.json and README.md (374 bytes unpacked): there is no JavaScript, no lifecycle hook, no dependency, no bin entry and no network string, so this version executes nothing. package.json sets "stub": true with the description "Temporary package placeholder for staged publishing", and the README states it is a "Temporary Holding Version" whose "operational version to replace this has been submitted for review and is awaiting a staged release" — i.e. the name is being held open for a later payload-bearing release. This version has no network indicators; the risk is the reserved name and the announced follow-up release, not the current bytes.