registry / @genex-ai/cli-demo / 0.12.1

@genex-ai/cli-demo@0.12.1

Set up your ~/.claude workspace, authorize, create a game project, generate AI assets, and publish (genex CLI).

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 55.1 KB of source, external domains: 127.0.0.1, demo-api.glotech.world, demo-web.glotech.world

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

3// src/index.ts

4import { readFileSync } from "fs";

5import path12 from "path";

6import { fileURLToPath as fileURLToPath2 } from "url";

8// src/commands/init.ts

9import path7 from "path";

11// src/config.ts

12import fs from "fs";

13import os from "os";

14import path from "path";

15import { fileURLToPath } from "url";

16var DEFAULT_AUTH_URL = "https://demo-web.glotech.world";

17var DEFAULT_API_URL = "https://demo-api.glotech.world";

18var DEFAULT_COLYSEUS_URL = "wss://demo-colyseus.glotech.world";

19var ENV_TOKEN_KEY = "GENEX_TOKEN";

20var AUTH_URL_ENV = "GENEX_AUTH_URL";

21var API_URL_ENV = "GENEX_API_URL";

22var COLYSEUS_URL_ENV = "GENEX_COLYSEUS_URL";

23function getAuthUrl(override) {

24 const raw = override || process.env[AUTH_URL_ENV] || DEFAULT_AUTH_URL;

25 return raw.replace(/\/+$/, "");

26}

27function getApiUrl(override) {

28 const raw = override || process.env[API_URL_ENV] || DEFAULT_API_URL;

29 return raw.replace(/\/+$/, "");

30}

31function getColyseusUrl(override) {

32 const raw = override || process.env[COLYSEUS_URL_ENV] || DEFAULT_COLYSEUS_URL;

33 return raw.replace(/\/+$/, "");

34}

35function getGenexDir() {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L15

Source & flagged code

1 flagged · loading source

dist/index.jsView file

15import { fileURLToPath } from "url"; L16: var DEFAULT_AUTH_URL = "https://demo-web.glotech.world"; L17: var DEFAULT_API_URL = "https://demo-api.glotech.world"; ... L23: function getAuthUrl(override) { L24: const raw = override || process.env[AUTH_URL_ENV] || DEFAULT_AUTH_URL; L25: return raw.replace(/\/+$/, ""); ... L35: function getGenexDir() { L36: return path.join(os.homedir(), ".genex"); L37: } ... L126: import readline from "readline"; L127: import { spawn } from "child_process"; L128: import { URL as URL2 } from "url";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L15

Findings

2 Medium5 Low

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

3// src/index.ts

4import { readFileSync } from "fs";

5import path12 from "path";

6import { fileURLToPath as fileURLToPath2 } from "url";

8// src/commands/init.ts

9import path7 from "path";

11// src/config.ts

12import fs from "fs";

13import os from "os";

14import path from "path";

15import { fileURLToPath } from "url";

16var DEFAULT_AUTH_URL = "https://demo-web.glotech.world";

17var DEFAULT_API_URL = "https://demo-api.glotech.world";

18var DEFAULT_COLYSEUS_URL = "wss://demo-colyseus.glotech.world";

19var ENV_TOKEN_KEY = "GENEX_TOKEN";

20var AUTH_URL_ENV = "GENEX_AUTH_URL";

21var API_URL_ENV = "GENEX_API_URL";

22var COLYSEUS_URL_ENV = "GENEX_COLYSEUS_URL";

23function getAuthUrl(override) {

24 const raw = override || process.env[AUTH_URL_ENV] || DEFAULT_AUTH_URL;

25 return raw.replace(/\/+$/, "");

26}

27function getApiUrl(override) {

28 const raw = override || process.env[API_URL_ENV] || DEFAULT_API_URL;

29 return raw.replace(/\/+$/, "");

30}

31function getColyseusUrl(override) {

32 const raw = override || process.env[COLYSEUS_URL_ENV] || DEFAULT_COLYSEUS_URL;

33 return raw.replace(/\/+$/, "");

34}

35function getGenexDir() {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L15