paddle-checkout-web
Warn
Audited by Snyk on Oct 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill demonstrates setting up and opening a Paddle checkout UI (
Paddle.Checkout.open) in a Next.js application, which constitutes a direct financial operation (purchases/charges). This client-side UI integration relies on frontend initialization tokens (NEXT_PUBLIC_PADDLE_CLIENT_TOKEN) and sandbox/production environment flags without independent, server-enforced authentication or authorization checks on the client-side checkout route itself.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata