PkgRadar

npm · registry.npmjs.org

@evermore.work/ui

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 2026.526.0-canary.0

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/assets/chunk-B4BG7PRW-BKJBm204.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/assets/flowDiagram-NV44I4VS-BAatf2CR.js
mediumLarge Javascript Payload4005589 bytes · package/dist/assets/index-D8nzJ32O.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.603.0-canary.0Low risk02026-06-03
2026.526.0-canary.0Review102026-05-26
2026.522.0-canary.1Review102026-05-25
2026.525.0-canary.0Review102026-05-25

Block this in CI

PkgRadar gates @evermore.work/ui (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @evermore.work/[email protected]