registry / @atlaskit/media-viewer / 54.8.7
@atlaskit/media-viewer@54.8.7
MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful and extendable yet easy-to-integrate
AI Security Review
scanned 26d ago · by lpm-firewall-aiInspected source shows package-aligned archive viewing and ordinary CSS, with no install hook in the manifest. The network references are used to retrieve media content for rendering, not evidence of an attack.
Static reason
No blocking static signals were detected.
Trigger
The application invokes the archive viewer for a media file, or a custom renderer requests an archive entry's binary content.
Impact
The inspected behavior retrieves content for rendering; no malicious behavior was established.
Mechanism
The viewer obtains a file URL from the media client, reads ZIP contents, and fetches the selected entry for a custom renderer.
AI rationale
Inspected source shows package-aligned archive viewing and ordinary CSS, with no install hook in the manifest. The network references are used to retrieve media content for rendering, not evidence of an attack.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a browser media viewer package and has no install lifecycle hook.
- The required CSS contains styling rules only.
- Archive loading retrieves a media file URL and reads it as a ZIP archive.
- A custom archive renderer fetches the selected entry when its content callback is invoked.
Evidence against
Behavioral surface
FilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
5 flaggeddist/cjs/styleWrappers.compiled.cssView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 18
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cjs/styleWrappers.compiled.cssView on unpkg1._11q75a80{background:linear-gradient(180deg,#101214,rgba(14,22,36,0)) no-repeat}
._151kfhey._151kfhey h1{font:var(--ds-font-body,
Low
Ai Review Evidence
The required CSS contains styling rules only.
dist/cjs/styleWrappers.compiled.cssView on unpkg · L1package.jsonView file
1{
"name": "@atlaskit/media-viewer",
"version": "54.8.7",
"description": "MediaViewer is Atlassian's powerful solution for viewing files on the web. It's both powerful and extend
Findings
1 High1 Medium6 Low
HighSemantic Analysis Limiteddist/cjs/styleWrappers.compiled.css
MediumNetwork
LowFilesystem
LowHigh Entropy Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/cjs/styleWrappers.compiled.css
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive.js
LowAi Review Evidencedist/cjs/viewers/archiveSidebar/archive.js
Affected versions and remediation
This report applies to @atlaskit/media-viewer@54.8.7.
See all versions of @atlaskit/media-viewer for other recorded verdicts.
- Review the evidence and your use of @atlaskit/media-viewer@54.8.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.