@dori-ai/dori-side-widget@1.13.146
A modern, responsive chat widget built with React and Chakra UI, designed for seamless integration into any website. The widget provides an AI-powered chat experience with e-commerce capabilities, perfect for customer support and sales assistance.
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe manifest has no install lifecycle hooks, and the inspected browser tracking behavior fits the storefront widget’s stated role. The flagged compressed artifact is expanded JavaScript for the entrypoint, with no reported analysis limitations.
Decision evidence
public snapshot- package.json names dist/widget.js as the entrypoint and declares no lifecycle scripts.
- The browser bundle sends product-view records to its widget tracking endpoint, consistent with the package’s storefront purpose.
- The offline artifact analysis identifies dist/widget.js.gz as UTF-8 JavaScript expanded from the entrypoint; it reports no inspection limitations.
Source & flagged code
6 flaggedPackage source references dynamic require/import behavior.
dist/widget.jsView on unpkg · L1Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
dist/assets/main-WABHmkDJ.jsView on unpkg · L1Findings
Affected versions and remediation
This report applies to @dori-ai/dori-side-widget@1.13.146.
See all versions of @dori-ai/dori-side-widget for other recorded verdicts.
- Review the evidence and your use of @dori-ai/dori-side-widget@1.13.146 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.