twzrd-x402-gate@0.12.0
Released identity 0.11.2. Buyer-side x402 trust gate: free preflight before signing USDC to a merchant. On Solana mainnet and Base mainnet (eip155:8453), a missing payTo is not approved, a buyer preflight outage does not sign unless TWZRD_FAIL_OPEN=true,
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package reports resource and payment metadata to its service after successful payments, with capture enabled by default. The implementation provides an opt-out and says response bodies are not sent, but this runtime reporting is not disclosed in the user-facing quickstart, so warn for telemetry.
Decision evidence
public snapshot- After a successful safe-fetch payment, the code invokes delivery capture with the merchant wallet, resource URL, and network.
- The captured observation includes the merchant wallet, settlement transaction, resource URL, and delivery metadata.
- Capture POSTs the observation to the configured TWZRD intel service by default; an environment variable or option can disable it.
- The capture is described as passive delivery evidence, and the implementation comments say response bodies are not shipped.
- The package provides an opt-out for delivery capture.
Source & flagged code
5 flaggedPackage source references child process execution.
bin/twzrd-safe-fetch.jsView on unpkg · L5Package source references dynamic require/import behavior.
bin/twzrd-gate-eval-refuse.jsView on unpkg · L28Findings
Affected versions and remediation
This report applies to twzrd-x402-gate@0.12.0.
See all versions of twzrd-x402-gate for other recorded verdicts.
- Review the evidence and your use of twzrd-x402-gate@0.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.