registry  /  tmg-media-player  /  0.0.9

tmg-media-player@0.0.9

A feature-rich, Web media player implementation for The Movie Garden initiative

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEvalFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 926 file(s), 8.49 MB of source, external domains: cdn.jsdelivr.net, img.youtube.com, player.vimeo.com, www.gstatic.com, www.npmjs.com, www.youtube-nocookie.com, www.youtube.com

Source & flagged code

2 flagged · loading source
dist/super.global.jsView file
1100if (!sig) return win4.setTimeout(handler, timeout, ...args); L1101: const id = win4.setTimeout(() => (sig.removeEventListener("abort", kill), "string" === typeof handler ? new Function(handler) : handler(...args)), timeout), kill = () => win4.clear... L1102: return sig.addEventListener("abort", kill, { once: true }), id;
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/super.global.jsView on unpkg · L1100
dist/tools/player.cjsView file
30// src/ts/consts/config.ts L31: var import_sia_reactor = require("sia-reactor"); L32:
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/player.cjsView on unpkg · L30

Findings

2 Medium5 Low
MediumDynamic Requiredist/tools/player.cjs
MediumNetwork
LowScripts Present
LowEvaldist/super.global.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings