registry / @reelm/sdk-render-client / 1.40484.0

@reelm/sdk-render-client@1.40484.0

Client-side render adapter for @reelm/sdk — render videos and stills in the browser using WebCodecs.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 4 file(s), 16.7 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-33javascript

1// src/internal/errors.ts

2var RenderWebError = class extends Error {

3 code;

4 constructor(code, message, options) {

5 super(message, { cause: options?.cause });

6 this.name = "RenderWebError";

7 this.code = code;

8 }

9};

11// src/render/codecs.ts

12async function getEncodableVideoCodecs(container, options) {

13 try {

14 const mod = await import('@remotion/web-renderer');

15 const codecs = await mod.getEncodableVideoCodecs(container, options);

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L13

16 return codecs;

17 } catch {

18 throw new RenderWebError(

19 "BROWSER_UNSUPPORTED",

20 "@remotion/web-renderer is not installed. Run: pnpm add @remotion/web-renderer"

21 );

22 }

23}

24async function getEncodableAudioCodecs(container, options) {

25 try {

26 const mod = await import('@remotion/web-renderer');

27 const codecs = await mod.getEncodableAudioCodecs(container, options);

28 return codecs;

29 } catch {

30 throw new RenderWebError(

31 "BROWSER_UNSUPPORTED",

32 "@remotion/web-renderer is not installed. Run: pnpm add @remotion/web-renderer"

33 );

Source & flagged code

1 flagged · loading source

dist/index.jsView file

13package = @reelm/sdk-render-client; repositoryIdentity = sdk; dependency = @remotion/web-renderer L13: try { L14: const mod = await import('@remotion/web-renderer'); L15: const codecs = await mod.getEncodableVideoCodecs(container, options);

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L13

Findings

1 High1 Medium2 Low

HighCopied Package Dependency Bridgedist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowNo License

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-33javascript

1// src/internal/errors.ts

2var RenderWebError = class extends Error {

3 code;

4 constructor(code, message, options) {

5 super(message, { cause: options?.cause });

6 this.name = "RenderWebError";

7 this.code = code;

8 }

9};

11// src/render/codecs.ts

12async function getEncodableVideoCodecs(container, options) {

13 try {

14 const mod = await import('@remotion/web-renderer');

15 const codecs = await mod.getEncodableVideoCodecs(container, options);

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L13

16 return codecs;

17 } catch {

18 throw new RenderWebError(

19 "BROWSER_UNSUPPORTED",

20 "@remotion/web-renderer is not installed. Run: pnpm add @remotion/web-renderer"

21 );

22 }

23}

24async function getEncodableAudioCodecs(container, options) {

25 try {

26 const mod = await import('@remotion/web-renderer');

27 const codecs = await mod.getEncodableAudioCodecs(container, options);

28 return codecs;

29 } catch {

30 throw new RenderWebError(

31 "BROWSER_UNSUPPORTED",

32 "@remotion/web-renderer is not installed. Run: pnpm add @remotion/web-renderer"

33 );