@getmicdrop/venue-calendar
A customizable Svelte calendar component for displaying comedy events
This report shows the evidence for @getmicdrop/venue-calendar@4.3.142. 0 of 92 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 16h ago · by lpm-firewall-aiThe inspected source matches the package’s calendar and checkout purpose. The flagged phone file is a country calling-code dataset, and the API client uses the package’s own service host; no malicious behavior was identified.
Decision evidence
public snapshot- The manifest describes a Svelte calendar component and exposes calendar, API, SEO, and theme entry points.
- The API client defaults to get-micdrop.com and uses fetch for its API requests.
- The flagged phone.js file begins with country calling-code data, consistent with phone-number metadata.
- The entry registers the micdrop-calendar custom element and exposes configuration for the widget; this fits the package purpose.
- No credential collection, unrelated collector, or install-time network behavior was identified in the inspected source.
Source & flagged code
6 flaggedA package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/venue-calendar.umd.jsView on unpkgFindings
Affected versions and remediation
This report applies to @getmicdrop/venue-calendar@4.3.142.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @getmicdrop/venue-calendar@4.3.142 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.