Loading npm security reports…
jgengine — TypeScript game engine SDK CLI (npm package jgengine / @jgengine/*). Not automotive. Humans: tell an agent Make a game that ... with jgengine. Agents: create, skills, doctor, desktop, llms. https://jgengine.com · https://jgengine.com/llms.txt
LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit `create` and `skills` commands install first-party JGengine agent skills through `npx`; `create` enables this by default. No install-time package execution or confirmed credential/data attack surface is present.
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/desktop.jsView on unpkg · L1Package source invokes a package manager install command at runtime.
dist/desktop.jsView on unpkg · L542This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/index.jsView on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/index.jsView on unpkgSource gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/desktop.jsView on unpkg · L1Package source invokes a package manager install command at runtime.
dist/desktop.jsView on unpkg · L542