The single finding is a harmless version mismatch inside a stray doc/build artifact (a MathJax grunt helper package.json). No malicious behavior, no runtime code, no exfiltration or execution sinks present.
AI breakdown
Plain-English summary of what this package does and how it behaves.
numpy 2.4.2 is the fundamental package for array computing in Python, providing multidimensional arrays and related numerical operations.
Capabilities
- Provides array computing functionality
Data access
- None observed
Network
- No network access observed
Standard scientific computing library with no scripts or dependencies listed in manifest; one static finding notes a version metadata mismatch.
Security findings (1)
Static analysis rule matches, with the exact code that triggered them.
Version mismatch in doc/source/_static/scipy-mathjax/package.json
Package metadata
Fundamental package for array computing in Python
Files in package (500)
How ShadowCanopy checks PyPI packages
ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.
Other PyPI packages
This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/pypi/numpy