wesbos/3d-model-anything

No problems traced to this repository code in these checks.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The documented build command completes the viewer build.: Real input produced the expected result: ✓ built in

  Source: npm run build

  Input: The README build command

  Expected: ✓ built in

  Command: npm run build

  Observed: ✓ built in 1.02s [plugin builtin:vite-reporter] (!) Some chunks are larger than 500 kB after minification. Consider: - Using dynamic import() to code-split the application - Use build.rolldownOptions.output.codeSplitting to improve chunking: https://rolldown.rs/reference/OutputOptions.codeSplitting - Adjust chunk size limit for this warning via build.chunkSizeWarningLimit.

Examples

• Build the documented viewer release.: command completed successfully

  Source: README.md / Run the viewer

  Input: npm run build

  Expected: ✓ built in

  Command: npm run build

  Observed: 52.32 kB │ gzip: 84.77 kB apps/room-viewer/dist/assets/office-v4-_YV8RYzW.js 375.70 kB │ gzip: 149.83 kB apps/room-viewer/dist/assets/rapier-B9LFmugn.js 2,853.74 kB │ gzip: 1,094.44 kB ✓ built in 1.01s [plugin builtin:vite-reporter] (!) Some chunks are larger than 500 kB after minification. Consider: - Using dynamic import() to code-split the application - Use build.rolldownOptions.output.codeSplitting to improve chunking: https://rolldown.rs/reference/OutputOptions.codeSplitting - Adjust chunk size limit for this warning via build.chunkSizeWarningLimit.

Local or hosted: local

Build and serve the 3D office viewer and playground

pwd && rg --files -g 'README*' -g 'package.json' -g 'pyproject.toml' -g 'AGENTS.md' -g 'Makefile' -g '*.md' | head -80 && git status --short && python3 --version && python3 -m pip --version
ls -la && find . -maxdepth 2 -type f | sort | head -100 && python3 --version && python3 -m pip --version
cat README.md && cat package.json && node --version; npm --version
npm ci
npm run build
curl -sS "$CDP_URL/json/version"
npm run dev -- --host 0.0.0.0 > <guest-path> 2>&1 &
curl -sS http://127.0.0.1:5188/ | head -20 && curl -sS 'http://127.0.0.1:5188/play.html?room=office-v4&mode=fpv' | head -10
mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"http","argv":["npm","run","dev","--","--host","0.0.0.0"],"cwd":"<guest-path>","url":"http://127.0.0.1:5188/play.html?room=office-v4&mode=fpv","env":{},"expected_text":"Room Playground"}
EOF
cat > .coldpass/claims.json <<'EOF'
[
 {"kind":"claim","claim":"The viewer exposes the office playground in first-person mode.","source":"The playground is at `/play.html?room=office-v4&mode=fpv`.","input":"/play.html?room=office-v4&mode=fpv","expected":"Room Playground","probe_kind":"http","argv":["npm","run","dev","--","--host","0.0.0.0"],"url":"http://127.0.0.1:5188/play.html?room=office-v4&mode=fpv","expected_text":"Room Playground","cwd":"<guest-path>"}
]
EOF
cat > .coldpass/examples.json <<'EOF'
[
 {"kind":"example","claim":"Start the viewer and load the documented office playground.","source":"README.md / Run the viewer","input":"/play.html?room=office-v4&mode=fpv","expected":"Room Playground","argv":["npm","run","dev","--","--host","0.0.0.0"],"cwd":"<guest-path>","env":{},"expected_text":"Room Playground","url":"http://127.0.0.1:5188/play.html?room=office-v4&mode=fpv"}
]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"checks":[],"reason":"Inspected README, package.json scripts, demos/index.ts and viewer entrypoints; no product cron, loop, webhook, --once or --now trigger is documented. The viewer is an interactive app, and its documented manual operation is captured in the HTTP probe."}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Build and serve the 3D office viewer and playground","operation_scope":"Node.js 22.12+; npm install and Vite development server","steps":["Confirmed Node.js v22.23.4 and npm 10.9.9","npm ci","npm run build","npm run dev -- --host 0.0.0.0","Fetched the documented /play.html?room=office-v4&mode=fpv route and confirmed Room Playground"],"deviations":["The shared CDP /json/version endpoint returned Chrome/155; recorded its actual response. Browser page interaction was not required for the HTTP operation."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
ps -eo pid,args | grep '[v]ite'
kill 2239 2240
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
python3 - <<'PY'
import json
for name in ['.coldpass/probe.json','.coldpass/claims.json','.coldpass/examples.json']:
 d=json.load(open(name))
 rows=d if isinstance(d,list) else [d]
 for r in rows:
  r['argv']=['npm','run','build']
  r.pop('url',None)
  r['expected_text']='✓ built in'
  if 'probe_kind' in r: r['probe_kind']='cli'
 if name.endswith('claims.json'):
  rows[0]['claim']='The documented build command completes the viewer build.'
  rows[0]['source']='npm run build'
  rows[0]['input']='The README build command'
  rows[0]['expected']='✓ built in'
  rows[0].pop('url',None)
  rows[0]['probe_kind']='cli'
 if name.endswith('examples.json'):
  rows[0]['claim']='Build the documented viewer release.'
  rows[0]['source']='README.md / Run the viewer'
  rows[0]['input']='npm run build'
  rows[0]['expected']='✓ built in'
  rows[0].pop('url',None)
 json.dump(d,open(name,'w'),indent=2)
PY
cat .coldpass/probe.json .coldpass/claims.json
python3 - <<'PY'
import json
for f in ['.coldpass/probe.json','.coldpass/claims.json']:
 d=json.load(open(f)); rows=d if isinstance(d,list) else [d]
 for r in rows:r['kind']='cli' if f.endswith('probe.json') else 'claim'
 json.dump(d,open(f,'w'),indent=2)
PY
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay