registry / @zerohash-sdk/travel-rule-react / 0.7.9
@zerohash-sdk/travel-rule-react@0.7.9
This library was generated with [Nx](https://nx.dev).
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe manifest has no install lifecycle hooks, and its published entrypoint implements a travel-rule widget wrapper. The inspected network requests serve that widget and conditional load-error diagnostics; no malicious behavior was found.
Static reason
No blocking static signals were detected.
Trigger
The React component mounts; diagnostic reporting occurs if widget loading fails.
Impact
No harmful effect was identified in the inspected source.
Mechanism
The component loads an environment-selected widget script and posts app, session, and browser diagnostic data to a collector.
AI rationale
The manifest has no install lifecycle hooks, and its published entrypoint implements a travel-rule widget wrapper. The inspected network requests serve that widget and conditional load-error diagnostics; no malicious behavior was found.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json points consumers to dist/index.js and declares no lifecycle hooks.
- dist/index.js loads the travel-rule widget from environment-specific Zerohash CDN locations.
- The reporter sends app, session, and browser diagnostic metadata to its configured collector after a widget load error.
Evidence against
- The inspected network behavior supports the package’s travel-rule widget and load-error reporting functions; no attack behavior was identified.
Behavioral surface
Network
UrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
1{
"name": "@zerohash-sdk/travel-rule-react",
"version": "0.7.9",
"private": false,
"type": "module",
"main": "./dist/index.js",
"module": "./dist/index.js",
"types": "./dist/index.d.ts",
"license": "MIT",
"exports": {
"./package.json": "./package.json",
".": {
"types": "./dist/index.d.ts",
"import": "./dist/index.js",
"default": "./dist/index.js"
}
},
"files": [
"dist",
"!**/*.tsbuildinfo"
],
"nx": {
"name": "travel-rule-react"
},
"peerDependencies": {
"react": ">=18.0.0",
"react-dom": ">=18.0.0"
}
}
Low
Suspicious Lifecycle Evidence
package.json points consumers to dist/index.js and declares no lifecycle hooks.
package.jsonView on unpkg · L1dist/index.jsView file
149rt.zerohash.com",
prod: "https://sdk-cdn.zerohash.com",
"eu-cert": "https://sdk-cdn.cert.zerohash.eu",
"eu-prod": "https://sdk-cdn.zerohash.eu"
}, y = "https://sdk-cdn.gating.0hash.com",
Low
Ai Review Evidence
dist/index.js loads the travel-rule widget from environment-specific Zerohash CDN locations.
dist/index.jsView on unpkg · L149Findings
1 Medium6 Low
MediumNetwork
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @zerohash-sdk/travel-rule-react@0.7.9.
See all versions of @zerohash-sdk/travel-rule-react for other recorded verdicts.
- Review the evidence and your use of @zerohash-sdk/travel-rule-react@0.7.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.