registry / floating-games-sdk / 1.0.21

floating-games-sdk@1.0.21

A React Native gaming SDK with 3 built-in games

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chainNo supply-chain packaging signals triggered.

Manifest

WildcardDependency

scanned 47 file(s), 216 KB of source

Source & flagged code

6 flagged

package.jsonView file

Lines 2-42json

2 "name": "floating-games-sdk",

3 "version": "1.0.21",

4 "description": "A React Native gaming SDK with 3 built-in games",

5 "main": "src/index.tsx",

6 "types": "src/index.tsx",

7 "keywords": [

8 "react-native",

9 "games",

10 "sdk",

11 "expo",

12 "puzzle",

13 "spin-wheel"

14 ],

15 "author": "Olive Okechukwu <bmithzee@gmail.com>",

16 "license": "MIT",

17 "repository": {

18 "type": "git",

19 "url": "https://gitlab.com/bmithzee/floating-games-sdk"

20 },

21 "scripts": {

22 "postinstall": "node install-peers.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

23 },

24 "files": [

25 "src",

26 "install-peers.js"

27 ],

28 "devDependencies": {

29 "typescript": "^5.0.0",

30 "@types/react": "*",

31 "@types/react-native": "*",

32 "react": "*",

33 "react-native": "*"

34 },

35 "peerDependencies": {

36 "react": ">=18.0.0",

37 "react-native": ">=0.72.0",

38 "@react-navigation/native": ">=6.0.0",

39 "@react-navigation/native-stack": ">=6.0.0",

40 "@expo-google-fonts/creepster": ">=0.4.0",

41 "@gorhom/bottom-sheet": ">=4.0.0",

42 "expo": ">=49.0.0",

README.mdView file

Lines 8-29markdown

9### 3. Run script instead

10node node_modules/floating-games-sdk/install-peers.js

12### 4. Use it

13import { FloatingGames } from 'floating-games-sdk';

15[//]: # (Call SDK like this)

17<FloatingGames

18 config={{

install-peers.jsView file

Lines 1-55javascript

1const { execSync } = require('child_process');

2const path = require('path');

High

Child Process

Package source references child process execution.

install-peers.jsView on unpkg · L1

3const

src/assets/sounds/timeup-sound.wavView file

•path = src/assets/sounds/timeup-sound.wav kind = high_entropy_blob sizeBytes = 529984 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/assets/sounds/timeup-sound.wavView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node install-peers.js

High

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code