@galacean/engine-core
A subpackage of `@galacean/engine`.
2
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
yiqiimchenjianchengkong.zxxeyworldwideyinjieruimeng.sugl3336563zhanyingweizhuxudongjohanzhumrkou47husongluzhuangjujiefeyabibi
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@galacean/engine-math | AI (phantom-deps): Declared as runtime dependency in package.json; same-org scope, stable false positive for this package. | ai | |
| provenance | slsa-provenance | AI (provenance): Established Galacean engine monorepo publishes via CI with SLSA attestation; stable across versions. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Core engine package in a large monorepo; sparse README and no keywords are expected for internal sub-packages. | ai |