@csedigital/component-library@0.0.9
In progress amalgamation of existing component library versions and project components into a universal, sharable, themed set of components and blocks.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe manifest declares no install hooks, and the published entry point exposes game-card components and static team data. The external URLs found serve streaming links and team logo assets; no harmful behavior was identified.
Decision evidence
public snapshot- The manifest has no install or lifecycle scripts; its scripts are development, build, lint, and library-build commands.
- The ESM entry point exports game-card components, data normalizers, and team utilities.
- The changed NHL data file contains team names, codes, and logo paths.
- External links in the CTA component point to game streaming pages.
- The package declares JavaScript and CSS entry points, but the inspected ESM entry point only re-exports library modules.
- Searches of dist found no fetch, XMLHttpRequest, child_process, eval, or localStorage usage.
Source & flagged code
5 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/esm/components/Card/components/Root/Root.cssView on unpkgThe manifest has no install or lifecycle scripts; its scripts are development, build, lint, and library-build commands.
package.jsonView on unpkg · L8Findings
Affected versions and remediation
This report applies to @csedigital/component-library@0.0.9.
See all versions of @csedigital/component-library for other recorded verdicts.
- Review the evidence and your use of @csedigital/component-library@0.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.