PkgRadar

npm · registry.npmjs.org

@hirokisakabe/pom

Large Javascript Payload: 8097929 bytes

Why PkgRadar flagged 8.0.0

SeveritySignalEvidence
mediumLarge Javascript Payload8097929 bytes · package/dist/calcYogaLayout/fonts/notoSansJPBold.js
mediumLarge Javascript Payload7904863 bytes · package/dist/calcYogaLayout/fonts/notoSansJPRegular.js

Scanned versions

VersionVerdictScoreScanned (UTC)
8.5.1Low risk02026-06-13
8.5.0Low risk02026-06-12
8.4.0Low risk02026-06-12
8.2.1Low risk02026-05-30
8.2.0Low risk02026-05-29
8.0.0Review62026-05-28
8.1.0Review62026-05-28

Block this in CI

PkgRadar gates @hirokisakabe/pom (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @hirokisakabe/[email protected]
Start free — 25 scans / moView full evidence