registry / @atlaskit/media-viewer / 54.8.26
@atlaskit/media-viewer@54.8.26
MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful and extendable yet easy-to-integrate
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe inspected source supports ordinary archive viewing behavior, and the required CSS path contains styling rules. No concrete attack surface was established.
Static reason
No blocking static signals were detected.
Trigger
A consumer renders an archive entry, optionally through a configured custom renderer.
Impact
No package-controlled network destination, credential transfer, or install-time action was established by the inspected source.
Mechanism
The code reads the selected entry as a blob, creates a browser object URL, and fetches that URL to provide the blob to the custom renderer.
AI rationale
The inspected source supports ordinary archive viewing behavior, and the required CSS path contains styling rules. No concrete attack surface was established.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a browser media-viewer package and its CJS entry point.
- Archive entries are read as blobs and exposed through browser object URLs for viewing.
- The archive custom-renderer helper fetches the generated local source URL and returns its blob.
- The required CSS finding path contains ordinary visual styling rules.
Evidence against
Behavioral surface
FilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
5 flaggeddist/cjs/styleWrappers.compiled.cssView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 46
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cjs/styleWrappers.compiled.cssView on unpkg1._11q75a80{background:linear-gradient(180deg,#101214,rgba(14,22,36,0)) no-repeat}
._151kfhey._151kfhey h1{font:var(--ds-font-body,norma
Low
Ai Review Evidence
The required CSS finding path contains ordinary visual styling rules.
dist/cjs/styleWrappers.compiled.cssView on unpkg · L1package.jsonView file
1{
"name": "@atlaskit/media-viewer",
"version": "54.8.26",
"description": "MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful
Findings
1 High1 Medium6 Low
HighSemantic Analysis Limiteddist/cjs/styleWrappers.compiled.css
MediumNetwork
LowFilesystem
LowHigh Entropy Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive-viewer-base.js
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive-viewer-base.js
LowAi Review Evidencedist/cjs/styleWrappers.compiled.css
Affected versions and remediation
This report applies to @atlaskit/media-viewer@54.8.26.
See all versions of @atlaskit/media-viewer for other recorded verdicts.
- Review the evidence and your use of @atlaskit/media-viewer@54.8.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.