@zerohash-sdk/fiat-deposits-react@1.15.0
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Fiat Deposits product.
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe inspected entrypoint uses fixed ZeroHash CDN and collector environments for product loading and failure telemetry. No lifecycle hook, credential forwarding to an unrelated recipient, or other concrete attack behavior was found.
Decision evidence
public snapshot- The manifest exports the bundled React entrypoint and declares no lifecycle scripts or runtime dependencies.
- The component chooses SDK and telemetry URLs from fixed ZeroHash environments.
- On load errors, it sends diagnostic metadata by POST to the configured collector URL.
- The component loads an asynchronous module script from the selected SDK URL; no package-controlled unrelated endpoint or credential forwarding was identified.
Source & flagged code
4 flaggedThe manifest exports the bundled React entrypoint and declares no lifecycle scripts or runtime dependencies.
package.jsonView on unpkg · L5The component chooses SDK and telemetry URLs from fixed ZeroHash environments.
dist/index.jsView on unpkg · L132Findings
Affected versions and remediation
This report applies to @zerohash-sdk/fiat-deposits-react@1.15.0.
See all versions of @zerohash-sdk/fiat-deposits-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/fiat-deposits-react@1.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.