PkgRadar

npm · registry.npmjs.org

@fhevm/sdk

Large Javascript Payload: 6665047 bytes

Why PkgRadar flagged 1.0.0-alpha.7

SeveritySignalEvidence
mediumLarge Javascript Payload6665047 bytes · package/_cjs/wasm/tfhe/tfhe_bg.v1.5.3.wasm.base64.js
mediumLarge Javascript Payload6663890 bytes · package/_esm/wasm/tfhe/tfhe_bg.v1.5.3.wasm.base64.js
mediumLarge Javascript Payload6663890 bytes · package/wasm/tfhe/tfhe_bg.v1.5.3.wasm.base64.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0Low risk02026-06-12
1.1.0-alpha.4Low risk02026-05-29
1.1.0-alpha.3Low risk02026-05-29
1.1.0-alpha.2Low risk02026-05-27
1.1.0-alpha.1Low risk02026-05-26
1.0.0-alpha.7Review92026-05-26

Block this in CI

PkgRadar gates @fhevm/sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @fhevm/[email protected]