@zerohash-sdk/onboarding-react@1.15.0
A React SDK that enables frontend React applications to seamlessly integrate with the Connect Onboarding product.
AI Security Review
scanned 26d ago · by lpm-firewall-aiSource inspection found no install hook or unrelated consumer-system mutation. The observed CDN loading and failure telemetry match the onboarding component's runtime purpose and target Zerohash services.
Decision evidence
public snapshot- The manifest points to dist/index.js and contains no install lifecycle scripts or runtime dependencies.
- The component loads its environment-specific web component from Zerohash CDN hosts when used in a browser.
- On load failure, it sends diagnostic data in a POST to the selected collector; the payload contains app, session, browser, page, and failure context.
Source & flagged code
3 flaggedThe manifest points to dist/index.js and contains no install lifecycle scripts or runtime dependencies.
package.jsonView on unpkg · L1The component loads its environment-specific web component from Zerohash CDN hosts when used in a browser.
Findings
Affected versions and remediation
This report applies to @zerohash-sdk/onboarding-react@1.15.0.
See all versions of @zerohash-sdk/onboarding-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/onboarding-react@1.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.