@loopdive/js2: Suspicious npm security report (Warn)

Loading npm security reports…

Source & flagged code

3 flagged

dist/optimize.jsView file

Lines 1-32javascript

1let _nodeImports = null;

2function getNodeImportsSync() {

3 if (_nodeImports) return _nodeImports;

4 if (typeof process === "undefined" || !process.versions || !process.versions.node) {

5 return null;

6 }

7 try {

8 let req;

9 const getBuiltin = process.getBuiltinModule;

10 if (typeof getBuiltin === "function") {

11 const moduleNs = getBuiltin("node:module");

12 if (moduleNs && typeof moduleNs.createRequire === "function") {

13 req = moduleNs.createRequire(`file://${process.cwd()}/`);

14 }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/optimize.jsView on unpkg · L12

15 }

16 if (!req || typeof req !== "function") return null;

17 const cp = req("node:child_process");

18 const fs = req("node:fs");

19 const path = req("node:path");

20 const os = req("node:os");

21 _nodeImports = {

22 execFileSync: cp.execFileSync,

23 writeFileSync: fs.writeFileSync,

24 readFileSync: fs.readFileSync,

25 unlinkSync: fs.unlinkSync,

26 rmdirSync: fs.rmdirSync,

27 mkdtempSync: fs.mkdtempSync,

28 join: path.join,

29 tmpdir: os.tmpdir

30 };

31 return _nodeImports;

32 } catch {

examples/edge-platform/run.shView file

•path = examples/edge-platform/run.sh kind = build_helper sizeBytes = 1177 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/edge-platform/run.shView on unpkg

dist/runtime-D6yybU-Q.jsView file

•path = dist/runtime-D6yybU-Q.js kind = oversized_source_file sizeBytes = 8402651 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime-D6yybU-Q.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/optimize.jsView file

12if (moduleNs && typeof moduleNs.createRequire === "function") { L13: req = moduleNs.createRequire(`file://${process.cwd()}/`); L14: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/optimize.jsView on unpkg · L12

examples/edge-platform/run.shView file

•path = examples/edge-platform/run.sh kind = build_helper sizeBytes = 1177 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/edge-platform/run.shView on unpkg

dist/runtime-D6yybU-Q.jsView file

•path = dist/runtime-D6yybU-Q.js kind = oversized_source_file sizeBytes = 8402651 magicHex = [redacted]

@loopdive/js2: Suspicious npm security report (Warn) | LPM Firewall

@loopdive/js2@0.62.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Runtime surface

Behavioral surface

Source & flagged code