No evidence of malicious code or behavior. Low popularity and few versions suggest immaturity, not malware.
No verification record available.
Based on the provided evidence, there is no indication that the package call-bind-apply-helpers (1.0.2) is malicious. The evidence points to a lack of popularity and a small number of versions, which are indicators of immaturity and low community engagement, not necessarily malicious intent. Evidence 0 highlights the limited version history, suggesting the project might be new or under-developed. Evidence 1 mentions low popularity and a potentially low OpenSSF score, again pointing to a lack of community scrutiny and maintenance rather than malicious activity. Neither piece of evidence provides concrete proof of malicious code or behavior. The absence of LLM-based file analysis or other technical evidence further weakens any claim of malicious intent. While caution is warranted with less popular packages, the available data does not justify classifying this package as malware.