registry  /  @energy8platform/platform-core  /  0.28.3

@energy8platform/platform-core@0.28.3

Energy8 platform core: Lua engine, DevBridge, RTP simulation, and SDK session orchestration. Renderer-agnostic — pair with any game framework (Pixi, Phaser, Three.js, custom).

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 55 file(s), 511 KB of source, external domains: cdn.jsdelivr.net, fonts.googleapis.com, github.com, www.w3.org

Source & flagged code

2 flagged · loading source
package.jsonView file
•scripts.postinstall = node scripts/install-simulate.mjs
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
bin/simulate.tsView file
86try { L87: const mod = await import(configPath); L88: config = mod.default ?? mod.config ?? mod;
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/simulate.tsView on unpkg · L86

Findings

1 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumDynamic Requirebin/simulate.ts
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings