@zerohash-sdk/crypto-deposits-react@0.3.4
This library was generated with [Nx](https://nx.dev).
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is a React wrapper that loads the expected crypto-deposits web component at runtime and reports loading failures. Its network behavior is vendor-aligned and user-invoked, with no malicious lifecycle or local-system behavior found.
Decision evidence
public snapshot- The manifest has no lifecycle scripts and exposes only the compiled React entry point.
- The component dynamically loads a vendor-hosted web component only when the consumer renders it, and reports load failures to vendor telemetry.
- No install-time execution, shell process use, filesystem access, credential harvesting, or persistence is present.
- The telemetry payload is limited to load-failure context, browser user agent, and page origin.
Source & flagged code
4 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgThe manifest has no lifecycle scripts and exposes only the compiled React entry point.
package.jsonView on unpkg · L1Findings
Affected versions and remediation
This report applies to @zerohash-sdk/crypto-deposits-react@0.3.4.
See all versions of @zerohash-sdk/crypto-deposits-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/crypto-deposits-react@0.3.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.