@sarimarcus/content-sites-ui@0.53.1
Universal Astro UI components, layout shell and design tokens shared by the content sites.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package presents Astro UI components and related helpers, with no install hook or executable bin in its manifest. Its filesystem access is a scoped public-asset existence check, while analytics and affiliate network behavior match the package's stated purpose.
Decision evidence
public snapshot- The manifest describes an Astro UI component package and exposes component and helper entry points; no install lifecycle scripts or bin are declared.
- The filesystem helper checks whether a path exists under the project's public directory for schema input.
- Analytics setup is an exported function, and its tracking events are governed by the analytics consent manager.
- Affiliate widget loaders use named Travelpayouts hosts; the Emerald loader checks its numeric site ID and loads on interaction or after page load.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/affiliate/AffiliateBandShell.astroView on unpkgThe manifest describes an Astro UI component package and exposes component and helper entry points; no install lifecycle scripts or bin are declared.
package.jsonView on unpkg · L1Findings
Affected versions and remediation
This report applies to @sarimarcus/content-sites-ui@0.53.1.
See all versions of @sarimarcus/content-sites-ui for other recorded verdicts.
- Review the evidence and your use of @sarimarcus/content-sites-ui@0.53.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.