@zerohash-sdk/travel-rule-react@0.5.0
This library was generated with [Nx](https://nx.dev).
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic inspection found a conventional React wrapper that loads its associated web component at runtime and reports load failures. There are no lifecycle hooks or concrete malicious behaviors in the package source.
Decision evidence
public snapshot- The React component dynamically loads a module script from Zerohash CDN URLs when mounted.
- On a component-script load failure, it posts diagnostic metadata to Zerohash Faro collector URLs.
- The manifest has no lifecycle scripts; it only exposes the built React entry point and declares React peer dependencies.
- No install-time execution, shell commands, filesystem writes, credential harvesting, or persistence code was found.
- Network behavior is confined to the rendered Travel Rule component and its load-failure telemetry; no confirmed malicious attack surface was established.
Source & flagged code
4 flaggedA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgThe manifest has no lifecycle scripts; it only exposes the built React entry point and declares React peer dependencies.
package.jsonView on unpkg · L5Findings
Affected versions and remediation
This report applies to @zerohash-sdk/travel-rule-react@0.5.0.
See all versions of @zerohash-sdk/travel-rule-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/travel-rule-react@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.