npm · registry.npmjs.org

@bcrumbs.net/inbox

Large Javascript Payload: 4595652 bytes

Why PkgRadar flagged 0.0.52

Severity	Signal	Evidence
medium	Large Javascript Payload	4595652 bytes · package/index.cjs.js
medium	Large Javascript Payload	4601409 bytes · package/index.esm.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.0.58`	Low risk	0	2026-06-08
`0.0.50`	Low risk	0	2026-06-08
`0.0.51`	Low risk	0	2026-06-08
`0.0.57`	Low risk	0	2026-06-08
`0.0.56`	Low risk	0	2026-06-01
`0.0.52`	Review	10	2026-05-26
`0.0.55`	Review	10	2026-05-26

Block this in CI

PkgRadar gates @bcrumbs.net/inbox (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @bcrumbs.net/[email protected]