pwa-auth
Five elements: user-icon, user-drawer, user-login, user-settings, and email-reset. pwa- events, a small API, and --pwa_ theme variables.
This report shows the evidence for pwa-auth@3.7.4. 0 of 6 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe account changes flagged by the scanner are user initiated, but Firebase Analytics starts automatically after Firebase becomes ready and the package reports account events without an evident disclosure or opt-out. This is undisclosed runtime telemetry, so the package should receive a warning rather than a publish block.
Decision evidence
public snapshot- When Firebase is ready, the package initializes Firebase Analytics whenever the SDK reports it is supported.
- The package logs `create_account` and `delete_account` events through that Analytics instance.
- The signup flow calls the account event logger after creating an account.
- The events are sent through the Firebase application configured by the integrator; the source does not show credentials being sent to an unrelated host.
- Profile edits and account deletion are user initiated; deletion requires confirmation and reauthentication.
Source & flagged code
5 flaggedA single source file combines environment access, network access, and code or shell execution; review context before blocking.
source/pwa-auth.jsView on unpkg · L193Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
source/pwa-auth.jsView on unpkg · L6Findings
Affected versions and remediation
This report applies to pwa-auth@3.7.4.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of pwa-auth@3.7.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.