@connect-xyz/auth-react@0.84.0
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Auth product.
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe observed network behavior is consistent with the package’s authentication component: it loads the Connect SDK and conditionally posts failure diagnostics to fixed vendor collector endpoints. No install-time execution, credential harvesting, or other concrete attack behavior was found.
Decision evidence
public snapshot- package.json points consumers to the React bundle and contains no lifecycle scripts.
- The bundle sends diagnostic reports containing app/session details and page origin only when a report URL is selected.
- Default collector URLs are fixed to Zerohash Grafana Faro endpoints.
- The component loads the Connect authentication SDK from its sandbox or production host.
Source & flagged code
5 flaggedpackage.json points consumers to the React bundle and contains no lifecycle scripts.
package.jsonView on unpkg · L1The bundle sends diagnostic reports containing app/session details and page origin only when a report URL is selected.
dist/index.jsView on unpkg · L102Findings
Affected versions and remediation
This report applies to @connect-xyz/auth-react@0.84.0.
See all versions of @connect-xyz/auth-react for other recorded verdicts.
- Review the evidence and your use of @connect-xyz/auth-react@0.84.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.