@sarimarcus/content-sites-ui@0.54.2
Universal Astro UI components, layout shell and design tokens shared by the content sites.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package is a collection of Astro UI components and helpers with no lifecycle scripts or executable entry point in its manifest. Reviewed network behavior supports analytics, consent management, affiliate widgets, or explicitly invoked browser tools; no malicious collection or action was found.
Decision evidence
public snapshot- The manifest describes an Astro UI component package and exports component and helper modules, with no declared executable entry point.
- Analytics events check the site's analytics consent manager before being added to the data layer.
- WebMCP tools load only when the browser exposes the API, and remote calls happen when an agent invokes a tool.
- The affiliate loader uses a Travelpayouts site ID and loads on interaction or page idle.
- The package references network hosts for analytics, affiliate widgets, and consent management.
- The SEO schema helper reads file-existence metadata from the project's public directory.
Source & flagged code
5 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
src/affiliate/AffiliateBandShell.astroView on unpkgThe manifest describes an Astro UI component package and exports component and helper modules, with no declared executable entry point.
package.jsonView on unpkg · L17Findings
Affected versions and remediation
This report applies to @sarimarcus/content-sites-ui@0.54.2.
See all versions of @sarimarcus/content-sites-ui for other recorded verdicts.
- Review the evidence and your use of @sarimarcus/content-sites-ui@0.54.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.