registry / @atlaskit/media-viewer / 54.11.19
@atlaskit/media-viewer@54.11.19
MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful and extendable yet easy-to-integrate
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe inspected entrypoints and archive fetch support the package's media-viewing purpose. The flagged CSS is presentation styling, and no malicious behavior was identified.
Static reason
No blocking static signals were detected.
Trigger
A selected archive file is rendered through a configured custom renderer.
Impact
No harmful effect was established from the inspected behavior.
Mechanism
The viewer fetches that file's source and returns the response as a blob.
AI rationale
The inspected entrypoints and archive fetch support the package's media-viewing purpose. The flagged CSS is presentation styling, and no malicious behavior was identified.
Evidence
package.jsondist/cjs/index.jsdist/cjs/viewers/archiveSidebar/archive-viewer-base.jsdist/cjs/styleWrappers.compiled.css
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a web media viewer and points its runtime entrypoints to viewer bundles.
- The CommonJS entrypoint exports the MediaViewer loader.
- Archive content is fetched only when rendering a selected archive entry with a custom renderer, and the response is returned as a blob.
- The required CSS finding contains presentation styles.
Evidence against
Behavioral surface
FilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
6 flaggeddist/cjs/styleWrappers.compiled.cssView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 46
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cjs/styleWrappers.compiled.cssView on unpkg1._11q75a80{background:linear-gradient(180deg,#101214,rgba(14,22,36,0)) no-repeat}
._151kfhey._151kfhey h1{font:var(--ds-font-body,normal 400 14px/20px "Atlassian Sans",ui-sans-seri
Low
Ai Review Evidence
The required CSS finding contains presentation styles.
dist/cjs/styleWrappers.compiled.cssView on unpkg · L1package.jsonView file
11"main": "dist/cjs/index.js",
"module": "dist/esm/index.js",
"module:es2019": "dist/es2019/index.js",
"types": "dist/
Findings
1 High1 Medium7 Low
HighSemantic Analysis Limiteddist/cjs/styleWrappers.compiled.css
MediumNetwork
LowFilesystem
LowHigh Entropy Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/cjs/index.js
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive-viewer-base.js
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive-viewer-base.js
LowAi Review Evidencedist/cjs/styleWrappers.compiled.css
Affected versions and remediation
This report applies to @atlaskit/media-viewer@54.11.19.
See all versions of @atlaskit/media-viewer for other recorded verdicts.
- Review the evidence and your use of @atlaskit/media-viewer@54.11.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.