konnektive-engine@0.4.11
- jquery: 1.12.4 (is needed you import the jquery before importing this library) - [jsDelivr](https://www.jsdelivr.com/) (Create a CDN based on the npm package)
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe manifest defines no automatic install hook, and the high-severity secret finding is an embedded key used with the Google Maps geocoding endpoint. The inspected source supports ordinary address autofill and does not establish malicious behavior.
Decision evidence
public snapshot- The manifest has no install lifecycle hook; its scripts are build, development, and publication tasks.
- The flagged bundle uses an embedded Google Maps key in a geocoding request, consistent with its ZIP and address autofill function.
Source & flagged code
5 flagged · loading sourcePackage contains a high-severity secret pattern.
dist/zip-autofill-google.jsView on unpkg · L1Google API key in dist/zip-autofill-google.js
dist/zip-autofill-google.jsView on unpkg · L1The flagged bundle uses an embedded Google Maps key in a geocoding request, consistent with its ZIP and address autofill function.
dist/zip-autofill-google.jsView on unpkg · L1Findings
Affected versions and remediation
This report applies to konnektive-engine@0.4.11.
See all versions of konnektive-engine for other recorded verdicts.
- Review the evidence and your use of konnektive-engine@0.4.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.