@atlaskit/media-viewer@54.12.0
MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful and extendable yet easy-to-integrate
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe new behavior is a feature-gated media-viewer preload that fetches the image the viewer is expected to display, with bounded storage and sanitized analytics. I found no install-time action, credential flow, unrelated endpoint, or concealed execution behavior.
Decision evidence
public snapshot- The package entry point exports the lazy MediaViewer loader.
- Hover preload returns unless the platform_media_viewer_preload_on_hover experiment is enabled.
- Eligible image warm-ups use the configured media client to fetch the image the viewer displays.
- Warm-up analytics are passed through the package's analytics payload sanitizer.
- The shared warm-up store holds at most two entries and expires untaken entries after 30 seconds.
- No install lifecycle scripts or shell execution were found.
- The inspected code does not read credentials or send data to a hard-coded external host.
- Image fetching is conditional on file type, file state, connection conditions, and the feature experiment.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cjs/errorMessage.compiled.cssView on unpkgThe package entry point exports the lazy MediaViewer loader.
package.jsonView on unpkg · L11Findings
Affected versions and remediation
This report applies to @atlaskit/media-viewer@54.12.0.
See all versions of @atlaskit/media-viewer for other recorded verdicts.
- Review the evidence and your use of @atlaskit/media-viewer@54.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.