registry  /  @mediakind/mkplayer  /  1.41.0

@mediakind/mkplayer@1.41.0

MediaKind HTML5 player SDK for HLS and DASH streams.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcess
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 2 file(s), 683 KB of source, external domains: dashif.org, developers.google.com, imasdk.googleapis.com, lunrjs.com, tartarus.org, www.gstatic.com, www.w3.org
Oversized source lightweight scan
mkplayer.js6.69 MB file, sampled 256 KB
ObfuscatedHighEntropyStringsMinifiedUrlStringsdashif.orgdevelopers.google.comimasdk.googleapis.comwww.gstatic.comwww.w3.org

Source & flagged code

1 flagged · loading source
mkplayer.jsView file
•path = mkplayer.js kind = oversized_source_file sizeBytes = 7010725 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

mkplayer.jsView on unpkg

Findings

2 High1 Medium2 Low
HighObfuscated
HighOversized Source Filemkplayer.js
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings