Loading npm security reports…
Lightweight page-view analytics script for Convertics — usable as an npm package or a single <script> tag served from a CDN.
No malicious attack surface was identified. This is a browser analytics library that transmits configured page-view data.
The manifest exposes only bundled browser entrypoints and has no install lifecycle hook.
package.jsonView on unpkg · L27The manifest exposes only bundled browser entrypoints and has no install lifecycle hook.
package.jsonView on unpkg · L60The module initializes only when a public key is supplied through its script attribute, and exports an init function.
dist/index.es.jsView on unpkg · L1The tracking request sends a public key, visitor identifier, and encrypted analytics payload to the Convertics Harbor endpoint.
dist/index.es.jsView on unpkg · L1This report applies to @convertics-ai/script@1.0.3.
See version security history for other recorded verdicts.
Evidence last updated: .
The manifest exposes only bundled browser entrypoints and has no install lifecycle hook.
package.jsonView on unpkg · L27The manifest exposes only bundled browser entrypoints and has no install lifecycle hook.
package.jsonView on unpkg · L60The module initializes only when a public key is supplied through its script attribute, and exports an init function.
dist/index.es.jsView on unpkg · L1The tracking request sends a public key, visitor identifier, and encrypted analytics payload to the Convertics Harbor endpoint.
dist/index.es.jsView on unpkg · L1