PkgRadar

npm · registry.npmjs.org

@dbml/core

Large Javascript Payload: 15341475 bytes

Why PkgRadar flagged 8.2.2

SeveritySignalEvidence
mediumLarge Javascript Payload15341475 bytes · package/./lib/index.cjs
mediumLarge Javascript Payload15341475 bytes · package/lib/index.cjs
mediumLarge Javascript Payload22624105 bytes · package/lib/index.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
9.0.0-alpha.0Low risk02026-06-16
8.3.0Low risk02026-06-16
8.2.6-alpha.0Low risk02026-06-15
8.3.0-alpha.0Low risk02026-06-05
8.2.5Low risk02026-06-03
8.2.4-alpha.2Low risk02026-06-02
8.2.4Low risk02026-06-01
8.2.3Low risk02026-05-29
8.2.2Review92026-05-27
8.2.1Review92026-05-26
8.2.0Review92026-05-26
8.2.1-alpha.0Review92026-05-26

Block this in CI

PkgRadar gates @dbml/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @dbml/[email protected]