PkgRadar

npm · registry.npmjs.org

@dashevo/dapi-grpc

Large Javascript Payload: 7369939 bytes

Why PkgRadar flagged 3.1.0-dev.7

SeveritySignalEvidence
mediumLarge Javascript Payload7369939 bytes · package/clients/drive/v0/nodejs/drive_pbjs.js
mediumLarge Javascript Payload7339282 bytes · package/clients/platform/v0/nodejs/platform_pbjs.js
mediumLarge Javascript Payload3912309 bytes · package/clients/platform/v0/nodejs/platform_protoc.js
mediumLarge Javascript Payload3912309 bytes · package/clients/platform/v0/web/platform_pb.js

Scanned versions

VersionVerdictScoreScanned (UTC)
4.0.0-rc.1Low risk02026-06-10
4.0.0-beta.4Low risk02026-06-09
4.0.0-beta.3Low risk02026-06-04
3.0.2Low risk02026-06-04
4.0.0-beta.2Low risk02026-06-02
4.0.0-beta.1Low risk02026-06-02
3.1.0-dev.8Low risk02026-05-29
3.1.0-dev.7Review122026-05-28
3.1.0-dev.6Review122026-05-27
3.1.0-dev.5Review122026-05-27

Block this in CI

PkgRadar gates @dashevo/dapi-grpc (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @dashevo/[email protected]