registry / @stitch-money/web / 2.28.0
@stitch-money/web@2.28.0
⚠ Under reviewPure Stitch SDK web components
Static Scan Results
scanned 17d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
DynamicRequireNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
1 flaggedsecure-fields.cjsView file
10};
L11: var __commonJS = (cb, mod) => function __require() {
L12: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
secure-fields.cjsView on unpkg · L10Findings
3 Medium5 Low
MediumDynamic Requiresecure-fields.cjs
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @stitch-money/web@2.28.0.
See all versions of @stitch-money/web for other recorded verdicts.
- Review the evidence and your use of @stitch-money/web@2.28.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.