registry / @buoy-gg/perf-monitor / 7.0.2

@buoy-gg/perf-monitor@7.0.2

Benchmark React Native performance on device — UI/JS FPS, CPU, memory & jank, with recorded runs you can compare. Part of Buoy devtools.

Static Scan Results

scanned 10h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

Manifest

NoLicense

scanned 120 file(s), 1.11 MB of source

Source & flagged code

1 flagged

lib/module/perf-monitor/utils/routeEventsBridge.jsView file

Lines 74-114javascript

74}

76/** Inject the device's current pathname (desktop), or null to clear. */

77export function setRemoteCurrentRoute(route) {

78 remoteCurrentRoute = route && route.length > 0 ? route : null;

79}

80function tryLoadEvents() {

81 try {

82 // eslint-disable-next-line @typescript-eslint/no-require-imports

83 const mod = require("@buoy-gg/route-events");

84 if (typeof mod?.routeEventStore?.getEvents !== "function" && typeof mod?.routeObserver?.addListener !== "function" && typeof mod?.useRouteSitemap !== "function" && typeof mod?.useNavigationStack !== "function") {

85 return null;

86 }

87 return mod;

88 } catch {

89 return null;

90 }

91}

92function tryLoadShared() {

93 try {

94 // eslint-disable-next-line @typescript-eslint/no-require-imports

95 const mod = require("@buoy-gg/shared-ui");

96 if (typeof mod?.getSafeRouter !== "function" && typeof mod?.isExpoRouterAvailable !== "function") {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

lib/module/perf-monitor/utils/routeEventsBridge.jsView on unpkg · L94

97 return null;

98 }

99 return mod;

100 } catch {

101 return null;

102 }

103}

104function ensureEvents() {

105 if (cachedEvents === undefined) cachedEvents = tryLoadEvents();

106 return cachedEvents;

107}

108function ensureShared() {

109 if (cachedShared === undefined) cachedShared = tryLoadShared();

110 return cachedShared;

111}

112

113/** Returns the current route pathname, or null. */

114export function getCurrentRoute() {

Source & flagged code

1 flagged · loading source

lib/module/perf-monitor/utils/routeEventsBridge.jsView file

94package = @buoy-gg/perf-monitor; repositoryIdentity = buoy; dependency = @buoy-gg/shared-ui L94: // eslint-disable-next-line @typescript-eslint/no-require-imports L95: const mod = require("@buoy-gg/shared-ui"); L96: if (typeof mod?.getSafeRouter !== "function" && typeof mod?.isExpoRouterAvailable !== "function") {

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code