@zerohash-sdk/fiat-deposits-react@1.15.9
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Fiat Deposits product.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe manifest has no install hooks, and the published runtime's network requests are tied to loading the Zerohash deposit component and reporting its load failures. The inspected source establishes no malicious behavior.
Decision evidence
public snapshot- The manifest publishes dist/index.js as the package entrypoint and declares no install lifecycle scripts.
- The runtime loads the fiat deposits web component from Zerohash CDN hosts when the React component is used.
- A failed component load triggers a diagnostic report to a configured Zerohash Faro collector.
- The diagnostic payload includes browser user-agent, page origin, and component load failure details.
- The diagnostic is sent as a JSON POST.
Source & flagged code
7 flaggedThe manifest publishes dist/index.js as the package entrypoint and declares no install lifecycle scripts.
package.jsonView on unpkg · L1The runtime loads the fiat deposits web component from Zerohash CDN hosts when the React component is used.
dist/index.jsView on unpkg · L150Findings
Affected versions and remediation
This report applies to @zerohash-sdk/fiat-deposits-react@1.15.9.
See all versions of @zerohash-sdk/fiat-deposits-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/fiat-deposits-react@1.15.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.