Loading npm security reports…
DONGJEON402 (DJEON402) - Enterprise-grade gasless payment token contracts with EIP-3009 (x402) support
Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
lib/openzeppelin-contracts-upgradeable/solhint.config.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
lib/forge-std/scripts/vm.pyView on unpkgPackage ships high-entropy non-source blobs.
lib/openzeppelin-contracts-upgradeable/audits/2024-12-v5.2.pdfView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L32Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L32Package source references dynamic require/import behavior.
lib/openzeppelin-contracts-upgradeable/solhint.config.jsView on unpkg · L1Package ships non-JavaScript build or shell helper files.
lib/forge-std/scripts/vm.pyView on unpkgPackage ships high-entropy non-source blobs.
lib/openzeppelin-contracts-upgradeable/audits/2024-12-v5.2.pdfView on unpkg