registry / @atlaskit/media-viewer / 54.7.5
@atlaskit/media-viewer@54.7.5
MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful and extendable yet easy-to-integrate
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe inspected findings align with normal viewer rendering and archive preview behavior. No concrete malicious behavior was identified.
Static reason
No blocking static signals were detected.
Trigger
A consumer opens an archive in the viewer.
Impact
No malicious effect was established from the inspected source.
Mechanism
The viewer gets the file URL through its media client and uses an HTTP range reader to read and unzip that archive.
AI rationale
The inspected findings align with normal viewer rendering and archive preview behavior. No concrete malicious behavior was identified.
Evidence
dist/cjs/viewers/archiveSidebar/archive.js
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json points to the expected compiled viewer entrypoints and marks compiled CSS as side effects.
- The flagged CSS contains ordinary presentation rules.
- The archive viewer obtains a file URL from the media client and passes it to an HTTP range reader to unzip the archive.
Evidence against
Behavioral surface
FilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
4 flaggeddist/cjs/styleWrappers.compiled.cssView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 18
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cjs/styleWrappers.compiled.cssView on unpkg1._11q75a80{background:linear-gradient(180deg,#101214,rgba(14,22,36,0)) no-repeat}
._151kfhey._151kfhey h1{font:var(--ds-
Low
Ai Review Evidence
The flagged CSS contains ordinary presentation rules.
dist/cjs/styleWrappers.compiled.cssView on unpkg · L1package.jsonView file
11"main": "dist/cjs/index.js",
"module": "dist/esm/index.js",
"module:es2019": "dist/es2019/index.js",
"types": "dist/types/index.d.ts",
"sideEffects": [
"*.compiled.
Findings
1 High1 Medium5 Low
HighSemantic Analysis Limiteddist/cjs/styleWrappers.compiled.css
MediumNetwork
LowFilesystem
LowHigh Entropy Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/cjs/styleWrappers.compiled.css
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive.js
Affected versions and remediation
This report applies to @atlaskit/media-viewer@54.7.5.
See all versions of @atlaskit/media-viewer for other recorded verdicts.
- Review the evidence and your use of @atlaskit/media-viewer@54.7.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.