registry / @atlaskit/media-viewer / 54.11.22
@atlaskit/media-viewer@54.11.22
MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful and extendable yet easy-to-integrate
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe inspected source supports ordinary media viewing behavior, and the flagged CSS contains presentation rules. No concrete malicious behavior was identified.
Static reason
No blocking static signals were detected.
Trigger
The inspected runtime code is used when rendering code files or opening archive entries.
Impact
No malicious impact was established.
Mechanism
The code viewer parses headers and renders content; the archive viewer reads archive entries through the media client and unzip library. No unrelated credential transfer, command execution, persistence, or control-surface mutation was identified in these excerpts.
AI rationale
The inspected source supports ordinary media viewing behavior, and the flagged CSS contains presentation rules. No concrete malicious behavior was identified.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to the package’s CJS and ESM entrypoints and declares CSS as a side effect.
- The required code viewer files parse headers, render a UI element, count lines, and cap formatted code rendering.
- The archive viewer reads selected archive entries and obtains archive bytes through the media client’s URL.
- The flagged CSS file contains ordinary presentation rules; no attack behavior was identified in the inspected source.
Evidence against
Behavioral surface
FilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
9 flaggeddist/cjs/styleWrappers.compiled.cssView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 46
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cjs/styleWrappers.compiled.cssView on unpkgpackage.jsonView file
11"main": "dist/cjs/index.js",
"module": "dist/esm/index.js",
"module:es2019": "dist/es2019/index.js",
"types": "dist/types/index.d.ts",
"sideEffects": [
"*.compiled.css"
],
Low
Ai Review Evidence
The manifest points to the package’s CJS and ESM entrypoints and declares CSS as a side effect.
package.jsonView on unpkg · L11dist/cjs/viewers/codeViewer/parseHeaders.jsView file
Findings
1 High1 Medium10 Low
HighSemantic Analysis Limiteddist/cjs/styleWrappers.compiled.css
MediumNetwork
LowFilesystem
LowHigh Entropy Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/cjs/viewers/codeViewer/parseHeaders.js
LowAi Review Evidencedist/cjs/viewers/codeViewer/CodeViewerHeaderBar.js
LowAi Review Evidencedist/cjs/viewers/codeViewer/codeViewerRenderer-compiled.js
LowAi Review Evidencedist/cjs/viewers/codeViewer/lineCount.js
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive-sidebar.js
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/get-archive-entries-from-file-state.js
LowAi Review Evidence
Affected versions and remediation
This report applies to @atlaskit/media-viewer@54.11.22.
See all versions of @atlaskit/media-viewer for other recorded verdicts.
- Review the evidence and your use of @atlaskit/media-viewer@54.11.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.