registry  /  loom-browser  /  0.0.22

loom-browser@0.0.22

A modular, headless-first genomic visualization engine built in TypeScript

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireFilesystemNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
Manifest
GitDependency
scanned 13 file(s), 15.6 MB of source, external domains: api.genome.ucsc.edu, drive.google.com, github.com, hgdownload.soe.ucsc.edu, igv.org, raw.githubusercontent.com, run.opencravat.org, storage.cloud.google.com, storage.googleapis.com, www.dropbox.com, www.googleapis.com, www.ncbi.nlm.nih.gov, www.w3.org
Oversized source lightweight scan
dist/igv.esm.js3.02 MB file, sampled 256 KB
ChildProcessWebSocketHighEntropyStringsUrlStringswww.googleapis.comwww.w3.org
dist/igv.js3.30 MB file, sampled 256 KB
ChildProcessWebSocketHighEntropyStringsUrlStringswww.googleapis.comwww.w3.org
dist/loom-igv.esm.js3.02 MB file, sampled 256 KB
ChildProcessWebSocketHighEntropyStringsUrlStringswww.googleapis.comwww.w3.org
dist/loom-igv.js3.30 MB file, sampled 256 KB
ChildProcessWebSocketHighEntropyStringsUrlStringswww.googleapis.comwww.w3.org
dist/loom.js2.05 MB file, sampled 256 KB
FilesystemNetworkChildProcessHighEntropyStringsUrlStringsstorage.cloud.google.comstorage.googleapis.comwww.googleapis.com

Source & flagged code

2 flagged · loading source
dist/loom.esm.jsView file
9750* ```javascript L9751: * var pako = require('pako') L9752: * , chunk1 = Uint8Array([1,2,3,4,5,6,7,8,9])
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/loom.esm.jsView on unpkg · L9750
dist/igv.esm.jsView file
•path = dist/igv.esm.js kind = oversized_source_file sizeBytes = 3170040 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/igv.esm.jsView on unpkg

Findings

2 High4 Medium6 Low
HighObfuscated
HighOversized Source Filedist/igv.esm.js
MediumDynamic Requiredist/loom.esm.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings