Loading npm security reports…
embedding data from esoftplay framework (web based) into mobile app
Static analysis flagged 20 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
bin/packager.jsView on unpkg · L1Source appears to send environment or credential material to an external endpoint.
bin/cli.jsView on unpkg · L2A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
bin/cli.jsView on unpkg · L2Package source invokes a package manager install command at runtime.
bin/build.jsView on unpkg · L400Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L11Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L11Package source invokes a package manager install command at runtime.
bin/build.jsView on unpkg · L400Package source references dynamic require/import behavior.
bin/packager.jsView on unpkg · L1Source appears to send environment or credential material to an external endpoint.
bin/cli.jsView on unpkg · L2A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
bin/cli.jsView on unpkg · L2