PkgRadar

npm · registry.npmjs.org

@formio/js

Large Javascript Payload: 4550508 bytes

Why PkgRadar flagged 5.3.5

SeveritySignalEvidence
mediumLarge Javascript Payload4550508 bytes · package/dist/formio.form.js
mediumLarge Javascript Payload5138601 bytes · package/dist/formio.full.js
mediumLarge Javascript Payload2148375 bytes · package/dist/formio.js
mediumLarge Javascript Payload2122379 bytes · package/dist/formio.utils.js

Scanned versions

VersionVerdictScoreScanned (UTC)
5.4.0Low risk02026-06-03
5.3.5Review272026-05-27
5.3.6Review272026-05-27

Block this in CI

PkgRadar gates @formio/js (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @formio/[email protected]