@zerohash-sdk/fiat-deposits-react@1.15.4
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Fiat Deposits product.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe inspected entrypoint implements the package’s stated React integration by loading the ZeroHash web component from vendor CDN hosts. Its failure telemetry sends diagnostic metadata to vendor collectors, and the inspected payload construction does not include the JWT; no malicious behavior was identified.
Decision evidence
public snapshot- package.json has no lifecycle scripts and points imports to dist/index.js.
- The component selects environment-specific ZeroHash CDN URLs and loads the selected module script in the browser.
- Failure telemetry posts app, browser, page-origin, and load-error metadata to ZeroHash Grafana collectors; inspected payload construction does not include the JWT.
Source & flagged code
6 flaggedpackage.json has no lifecycle scripts and points imports to dist/index.js.
package.jsonView on unpkg · L2The component selects environment-specific ZeroHash CDN URLs and loads the selected module script in the browser.
dist/index.jsView on unpkg · L136Findings
Affected versions and remediation
This report applies to @zerohash-sdk/fiat-deposits-react@1.15.4.
See all versions of @zerohash-sdk/fiat-deposits-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/fiat-deposits-react@1.15.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.