@zerohash-sdk/crypto-deposits-react@0.4.0
This library was generated with [Nx](https://nx.dev).
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe manifest contains no install lifecycle hooks, and the inspected runtime behavior is consistent with a React wrapper that loads Zerohash’s deposit component and reports load failures. No concrete attack behavior was established.
Decision evidence
public snapshot- package.json exposes a React module entrypoint and has no lifecycle scripts or runtime dependencies beyond React peers.
- The bundle sends failure telemetry to a configured collector and loads the crypto-deposits web component as an asynchronous module.
- The inspected telemetry request contains a JSON payload and session header; no credential forwarding or unrelated data collection was identified.
Source & flagged code
4 flaggedpackage.json exposes a React module entrypoint and has no lifecycle scripts or runtime dependencies beyond React peers.
package.jsonView on unpkg · L1The bundle sends failure telemetry to a configured collector and loads the crypto-deposits web component as an asynchronous module.
dist/index.jsFindings
Affected versions and remediation
This report applies to @zerohash-sdk/crypto-deposits-react@0.4.0.
See all versions of @zerohash-sdk/crypto-deposits-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/crypto-deposits-react@0.4.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.