kasookoo-click-to-call-widget@0.1.0-beta.16
Framework-agnostic click-to-call widget for Kasookoo — a built-in dialer and call window that places outbound SIP/phone calls over WebRTC.
AI Security Review
scanned 29d ago · by lpm-firewall-aiSource inspection found no install hooks or concrete malicious behavior. The flagged environment access is compatible with bundled buffer support, while network requests and telemetry align with the widget’s stated call functionality.
Decision evidence
public snapshot- The manifest identifies a Kasookoo click-to-call widget and defines no install lifecycle hooks.
- Session tokens are added as bearer credentials to the request made by the widget’s API client.
- Telemetry uses a Kasookoo monitoring endpoint and can be disabled through widget configuration.
Source & flagged code
6 flaggedA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/kasookoo-dialer.jsView on unpkg · L1Findings
Affected versions and remediation
This report applies to kasookoo-click-to-call-widget@0.1.0-beta.16.
See all versions of kasookoo-click-to-call-widget for other recorded verdicts.
- Review the evidence and your use of kasookoo-click-to-call-widget@0.1.0-beta.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.