PkgRadar

npm · registry.npmjs.org

@actual-app/cli

Large Javascript Payload: 8353180 bytes

Why PkgRadar flagged 26.6.0-nightly.20260528

SeveritySignalEvidence
mediumLarge Javascript Payload8353180 bytes · package/dist/cli.js

Scanned versions

VersionVerdictScoreScanned (UTC)
26.7.0-nightly.20260613Low risk02026-06-13
26.7.0-nightly.20260612Low risk02026-06-12
26.7.0-nightly.20260611Low risk02026-06-11
26.7.0-nightly.20260610Low risk02026-06-10
26.7.0-nightly.20260609Low risk02026-06-09
26.7.0-nightly.20260608Low risk02026-06-08
26.7.0-nightly.20260607Low risk02026-06-07
26.7.0-nightly.20260606Low risk02026-06-06
26.7.0-nightly.20260605Low risk02026-06-05
26.7.0-nightly.20260604Low risk02026-06-04
26.7.0-nightly.20260603Low risk02026-06-03
26.7.0-nightly.20260602Low risk02026-06-02
26.6.0Low risk02026-06-01
26.6.0-nightly.20260601Low risk02026-06-01
26.6.0-nightly.20260531Low risk02026-05-31
26.6.0-nightly.20260530Low risk02026-05-30
26.6.0-nightly.20260529Low risk02026-05-29
26.6.0-nightly.20260528Review32026-05-28
26.6.0-nightly.20260527Review32026-05-27
26.6.0-nightly.20260526Review32026-05-26
26.6.0-nightly.20260524Review102026-05-25
26.6.0-nightly.20260525Review102026-05-25

Block this in CI

PkgRadar gates @actual-app/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @actual-app/[email protected]
Start free — 25 scans / moView full evidence