@dynamic-labs-sdk/metamask@1.47.0
⚠ Under reviewChain-agnostic primitives for integrating the [MetaMask SDK](https://docs.metamask.io/sdk/) (`@metamask/connect-multichain` and its chain-specific facades such as `@metamask/connect-evm`) with the Dynamic JS SDK.
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe package manifest and entrypoint confirm that @dynamic-labs-sdk/client is a runtime dependency. Its source was unavailable for review, so the package cannot be cleared as clean; this alone does not establish malicious behavior.
Decision evidence
public snapshot- package.json declares @dynamic-labs-sdk/client@1.47.0 as a runtime dependency.
- dist/index.cjs and the MetaMask client manager import that dependency at runtime, but its source was unavailable for this review.
- The inspected entrypoint implements MetaMask wallet connection helpers; no concrete attack behavior was established in the inspected source.
Source & flagged code
3 flaggedpackage.json declares @dynamic-labs-sdk/client@1.47.0 as a runtime dependency.
package.jsonView on unpkg · L34dist/index.cjs and the MetaMask client manager import that dependency at runtime, but its source was unavailable for this review.
dist/index.cjsView on unpkg · L4Findings
Affected versions and remediation
This report applies to @dynamic-labs-sdk/metamask@1.47.0.
See all versions of @dynamic-labs-sdk/metamask for other recorded verdicts.
- Review the evidence and your use of @dynamic-labs-sdk/metamask@1.47.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.