@zerohash-sdk/fiat-deposits-react@1.13.4
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Fiat Deposits product.
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe package has no lifecycle scripts, and its observed network calls support loading the named Zero Hash component and reporting load errors. The inspected error report includes selected decoded JWT claims but not the JWT itself; no attack was identified.
Decision evidence
public snapshot- package.json exposes dist/index.js as the package entry point and defines no lifecycle scripts.
- The React component loads the fiat-deposits web component as an asynchronous module script.
- On load failure, the bundle posts diagnostic metadata to its configured collector; it decodes selected JWT claims for region and report attributes, without sending the JWT itself in the inspected request.
Source & flagged code
4 flaggedpackage.json exposes dist/index.js as the package entry point and defines no lifecycle scripts.
package.jsonView on unpkg · L5The React component loads the fiat-deposits web component as an asynchronous module script.
dist/index.jsView on unpkg · L125Findings
Affected versions and remediation
This report applies to @zerohash-sdk/fiat-deposits-react@1.13.4.
See all versions of @zerohash-sdk/fiat-deposits-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/fiat-deposits-react@1.13.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.