drgame-cc-3
道然游戏适配包
This report shows the evidence for drgame-cc-3@1.0.9. 0 of 7 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe source shows automatic runtime reporting to the vendor analytics endpoint when the host game initializes the SDK, with user/device information in the payload and no evident opt-out. Reporting is a documented SDK feature, so this is a warning-level telemetry concern rather than evidence of malware.
Decision evidence
public snapshot- AdSdk initialization automatically initializes reporting and sends an app-start event.
- The default report endpoint is sup.daoran.tv, and report requests include user/device information and event data.
- The reporter has no evident disable option in its configuration.
- The package documents gameplay reporting as part of its SDK API.
- The postinstall script copies package assets into the host Cocos project, as described in the README.
Source & flagged code
7 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgAdSdk initialization automatically initializes reporting and sends an app-start event.
drscript/ad-sdk/ad-sdk.tsFindings
Affected versions and remediation
This report applies to drgame-cc-3@1.0.9.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of drgame-cc-3@1.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.