npm · registry.npmjs.org

@builder.io/plugin-tools

Large Javascript Payload: 5050892 bytes

Why PkgRadar flagged 0.0.10-2

Severity	Signal	Evidence
medium	Large Javascript Payload	5050892 bytes · package/dist/index.es5.js
medium	Large Javascript Payload	6226733 bytes · package/dist/index.system.js
medium	Large Javascript Payload	5502449 bytes · package/dist/index.umd.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.0.10-0`	Low risk	0	2026-06-11
`0.0.10-1`	Low risk	0	2026-06-11
`0.0.10-2`	Review	15	2026-05-26
`0.0.10`	Review	15	2026-05-26

Block this in CI

PkgRadar gates @builder.io/plugin-tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @builder.io/[email protected]