live · scanning repos
Scanrepo
github.com
github.com / bilawalsidhu

bilawalsidhu/gods-eye-view

JavaScript·2465 files·commit 151ce3d·scanned 8d ago·cached ✓
15/100
LOW RISK
Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 15 — 62,167+ stars — findings likely false positives

verdict accurate?
62,167 stars
5% file coverage
threat-state: lowlive

FINDINGS ░▒▓

what this code does░▒▓

What happens when you open, install or run it, from the findings below.

  1. when runscripts/qa-draw-tool.mjs builds code from strings at run time with new Function. scripts/qa-draw-tool.mjs
criticalFunction() constructor detectednew Function() is equivalent to eval() and can execute arbitrary code strings.scripts/qa-draw-tool.mjs
        // eslint-disable-next-line no-new-func
        const belongsTo = new Function(`return (${belongsSource})`)();
        const viewer = window.__godsEyeView.viewer;
        const scene = viewer....
+5
infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2
infoSuspicious file in repoVery large source file (1945KB) — could contain obfuscated payloadsrc/data/local_data/cctv_ground_heights/cctv_ground_heights.json+2
infoSuspicious file in repoVery large source file (924KB) — could contain obfuscated payloadsrc/data/local_data/natural_earth/countries.json+2
infoSuspicious file in repoVery large source file (618KB) — could contain obfuscated payloadsrc/data/local_data/natural_earth/marine.json+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

120 files scanned @ 151ce3d | 11/2/2026 | heuristic scan — always review manually

risk by category
code execution7
network & exfiltration0
file system access0
obfuscation0
supply chain15
owasp / injection0
telemetry
files 120/2465rules hit 5engine v10commit 151ce3d

github

bilawalsidhu/gods-eye-view

A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.

JavaScript
62167
12143
141d
2465 files
120 scanned(5%)
151ce3d

network indicators░▒▓

Hosts this code names or would connect to. Top 50 of 286, decoded and call-site destinations first. Informational, not scored.

architecture░▒▓

entry (37) flagged (1) pkg (23)
128 nodes · 103 edgesscroll to zoom · click node to jump to finding
LOW (15/100) — bilawalsidhu/gods-eye-view — ScanRepo