@schemavaults/auth-react-provider@0.19.2
React hooks and components to make using the @schemavaults/auth-client-sdk a breeze
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package presents itself as a React wrapper for SchemaVaults authentication, and the entry point and initialization flow match that purpose. Its manifest shows no install lifecycle hook, and the inspected network behavior is delegated to the configured auth client.
Decision evidence
public snapshot- The package is described as React hooks and components for the SchemaVaults auth client.
- The package entry point re-exports the provider, hooks, and auth SDK APIs.
- The package scripts include build and postbuild cleanup commands, with no install lifecycle script shown.
- Auth client initialization occurs in a React effect when the client is not ready.
- The factory passes the configured auth server URL and adapter to the auth client.
- The package declares no preinstall, install, or postinstall script.
- The inspected entry point contains exports rather than automatic network or account actions.
- The adapter accepts configured auth server and session route values for auth operations.
Source & flagged code
6 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/lib/react-auth-client-adapter.js#virtual:normalized:round1View on unpkgThe package is described as React hooks and components for the SchemaVaults auth client.
package.jsonView on unpkg · L2Findings
Affected versions and remediation
This report applies to @schemavaults/auth-react-provider@0.19.2.
See all versions of @schemavaults/auth-react-provider for other recorded verdicts.
- Review the evidence and your use of @schemavaults/auth-react-provider@0.19.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.