@sarimarcus/content-sites-ui@0.48.0
Universal Astro UI components, layout shell and design tokens shared by the content sites.
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection found no malicious behavior. The flagged network and parser hints correspond to UI, affiliate, analytics, and explicitly configured WebMCP features; the manifest has no install lifecycle hook.
Decision evidence
public snapshot- package.json describes an Astro UI component package and exports source entry points; it defines no install lifecycle hook.
- The required source files describe and render affiliate, editorial, navigation, search, layout, SEO, primitive, and styling features.
- WebMCP remote tools require a configured endpoint and tool definitions, and send a request only when an exposed tool is executed.
- Analytics events check analytics consent when the consent manager is present; third-party loading is deferred to interaction or idle time, and the affiliate loader uses a numeric site identifier.
Source & flagged code
8 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/affiliate/AffiliateBandShell.astroView on unpkgThe required source files describe and render affiliate, editorial, navigation, search, layout, SEO, primitive, and styling features.
src/affiliate/AffiliateBandShell.astroView on unpkg · L1Findings
Affected versions and remediation
This report applies to @sarimarcus/content-sites-ui@0.48.0.
See all versions of @sarimarcus/content-sites-ui for other recorded verdicts.
- Review the evidence and your use of @sarimarcus/content-sites-ui@0.48.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.