@zerohash-sdk/fiat-account-link-react@1.15.9
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Fiat Account Link product.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe manifest exposes a React runtime entrypoint, and the bundle’s network activity supports loading the Zero Hash account-link component and reporting load failures to Zero Hash collectors. No concrete attack behavior was found in the inspected source.
Decision evidence
public snapshot- The manifest points to dist/index.js as the runtime entrypoint.
- The React component loads the Zero Hash web component when mounted, passing its JWT and environment.
- On script-load failure, the bundle sends diagnostics containing application, session, browser, and page-origin details.
- The web component and diagnostic collector URLs are Zero Hash service endpoints.
Source & flagged code
8 flaggedThe manifest points to dist/index.js as the runtime entrypoint.
package.jsonView on unpkg · L1The React component loads the Zero Hash web component when mounted, passing its JWT and environment.
dist/index.jsView on unpkg · L284Findings
Affected versions and remediation
This report applies to @zerohash-sdk/fiat-account-link-react@1.15.9.
See all versions of @zerohash-sdk/fiat-account-link-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/fiat-account-link-react@1.15.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.