registry / @zerogpu/worker / 0.0.2
@zerogpu/worker@0.0.2
ZeroGPU Worker — join the ZeroGPU network from a Docker container or any Node.js host (servers, macOS desktop apps, developer laptops), and serve inference locally.
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
EnvironmentVarsNetwork
MinifiedTrivialUrlStrings
Source & flagged code
1 flaggeddist/index.jsView file
1import{realpathSync as Fe}from"node:fs";import{fileURLToPath as Jt}from"node:url";import{readFileSync as Ne}from"node:fs";import S from"node:os";var V={debug:10,info:20,warn:30,err...
L2: `):n.write(`${s}
L3: `)}function c(i){return{debug:(e,t)=>x("debug",i,e,t),info:(e,t)=>x("info",i,e,t),warn:(e,t)=>x("warn",i,e,t),error:(e,t)=>x("error",i,e,t)}}var Ue=c("benchmark");function Be(){try...
L4: `),process.exit(1)}oe(i.logLevel),ie.info(`ZeroGPU Worker starting (env=${i.environment}, fallback=${i.localFallback})`);let e=ce(i.dataDir),t=await le(),r=new G(i,e.deviceId,t),s=...
Low
Findings
2 Medium4 Low
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.js
LowUrl Strings
Affected versions and remediation
This report applies to @zerogpu/worker@0.0.2.
See all versions of @zerogpu/worker for other recorded verdicts.
- Review the evidence and your use of @zerogpu/worker@0.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.