twzrd-x402-gate@0.9.0
⚠ Under reviewSecurity fixes: payment-verdict integrity issues fixed through 0.11.4 (see the 0.11.2, 0.11.3 and 0.11.4 changelogs). Upgrade to twzrd-x402-gate@0.11.4.
Product: paying client with wash brake. createTwzrdPayingClient / createTwzrdBeforePaymentHook default = GET merchant_card → abort iff wash_flagged, fail-open if intel down. No Path A in the default. Full 0.8 engine via engine:"full". Optional settle guar
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Decision evidence
public snapshotSource & flagged code
4 flaggedPackage source references child process execution.
bin/twzrd-safe-fetch.jsView on unpkg · L5This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/twzrd-gate-eval-refuse.jsView on unpkgFindings
Affected versions and remediation
This report applies to twzrd-x402-gate@0.9.0.
See all versions of twzrd-x402-gate for other recorded verdicts.
- Review the evidence and your use of twzrd-x402-gate@0.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.