The only finding is a benign version metadata mismatch in a vendored MathJax grunt config (package.json). The file contains only standard devDependencies with no executable code, network calls, or suspicious behavior. No malicious patterns present in the provided source.
AI breakdown
Plain-English summary of what this package does and how it behaves.
numpy is the fundamental package for array computing in Python, providing support for large multi-dimensional arrays and matrices along with mathematical functions.
Capabilities
- No scripts defined in manifest
Data access
- None observed
Network
- No network access observed
Standard scientific computing library with no observed runtime scripts or dependencies in the manifest. Static finding notes a version metadata mismatch that should be verified before installation.
Security findings (1)
Static analysis rule matches, with the exact code that triggered them.
Version mismatch in doc/source/_static/scipy-mathjax/package.json
Package metadata
Fundamental package for array computing in Python
Files in package (500)
How ShadowCanopy checks PyPI packages
ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.
Other PyPI packages
This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/pypi/numpy