@rue-js/runtime-vapor
Rue runtime implemented in Rust and compiled to WebAssembly
9
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
xiangminliu1990
Keywords
rueruntimewasm
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | net-exec-file:pkg-vapor/rue_runtime_vapor.d.ts | AI (source-diff): TypeScript declaration file; no executable code, false positive. | ai | |
| source-diff | net-exec-file:pkg-node-reactive/rue_runtime_vapor.d.ts | AI (source-diff): TypeScript declaration file; no executable code, false positive. | ai | |
| source-diff | net-exec-file:pkg-node-vapor/rue_runtime_vapor.d.ts | AI (source-diff): TypeScript declaration file; no executable code, false positive. | ai | |
| source-diff | net-exec-file:pkg-node/rue_runtime_vapor.d.ts | AI (source-diff): TypeScript declaration file; no executable code, false positive. | ai | |
| source-diff | net-exec-file:pkg-reactive/rue_runtime_vapor.d.ts | AI (source-diff): TypeScript declaration file; no executable code, false positive. | ai | |
| source-diff | net-exec-file:pkg-reactive/rue_runtime_vapor_bg.js | AI (source-diff): wasm-bindgen glue code; network+exec pattern is standard WASM bridge, not malware. | ai | |
| source-diff | net-exec-file:pkg-vapor/rue_runtime_vapor_bg.js | AI (source-diff): wasm-bindgen glue code; same pattern as above. | ai | |
| source-diff | net-exec-file:pkg-node-reactive/rue_runtime_vapor.js | AI (source-diff): wasm-bindgen glue code; standard WASM bridge pattern. | ai | |
| source-diff | net-exec-file:pkg-node-vapor/rue_runtime_vapor.js | AI (source-diff): wasm-bindgen glue code; standard WASM bridge pattern. | ai | |
| source-diff | net-exec-file:pkg-node/rue_runtime_vapor.js | AI (source-diff): wasm-bindgen glue code; standard WASM bridge pattern. | ai | |
| source-diff | net-exec-file:pkg/rue_runtime_vapor_bg.js | AI (source-diff): Standard wasm-bindgen JS glue; Reflect.get and new Function are generated bridge code, not malicious. | ai | |
| source-diff | net-exec-file:pkg/rue_runtime_vapor.d.ts | AI (source-diff): TypeScript declaration file generated by wasm-bindgen; no executable network calls. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): wasm-bindgen generated glue code; new Function() is standard pattern for WASM JS interop, not dynamic eval of user input. | ai | |
| semgrep | semgrep:api-obfuscation-reflect | AI (semgrep): wasm-bindgen generated glue code; Reflect.get is standard JS interop pattern for WASM bindings. | ai |