@sarimarcus/content-sites-ui@0.52.1
Universal Astro UI components, layout shell and design tokens shared by the content sites.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package metadata exposes UI components and helpers without lifecycle scripts or a command-line entry point. Inspected network behavior is tied to analytics and affiliate integrations, with analytics consent checks and deferred affiliate loading; the flagged Astro file is presentational.
Decision evidence
public snapshot- package.json exports UI component and helper modules; it defines no lifecycle scripts or executable bin.
- Analytics tracking is explicitly initialized by setupAnalytics and pushes events only when analytics consent is present.
- The flagged AffiliateBandShell.astro is a presentational component that renders supplied title, subtitle and slots.
- Affiliate loader code validates the supplied Travelpayouts ID and loads its script after user interaction or page idle.
Source & flagged code
5 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/affiliate/AffiliateBandShell.astroView on unpkgThe flagged AffiliateBandShell.astro is a presentational component that renders supplied title, subtitle and slots.
src/affiliate/AffiliateBandShell.astroView on unpkg · L1Findings
Affected versions and remediation
This report applies to @sarimarcus/content-sites-ui@0.52.1.
See all versions of @sarimarcus/content-sites-ui for other recorded verdicts.
- Review the evidence and your use of @sarimarcus/content-sites-ui@0.52.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.