npm · registry.npmjs.org

@mlightcad/libredwg-converter

Large Javascript Payload: 8688367 bytes

Why PkgRadar flagged 3.5.40

Severity	Signal	Evidence
medium	Large Javascript Payload	8688367 bytes · package/dist/libredwg-parser-worker.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.7.1`	Low risk	0	2026-06-13
`3.7.0`	Low risk	0	2026-06-13
`3.6.4`	Low risk	0	2026-06-10
`3.6.3`	Low risk	0	2026-06-07
`3.6.2`	Low risk	0	2026-06-06
`3.6.1`	Low risk	0	2026-05-31
`3.6.0`	Low risk	0	2026-05-29
`3.5.40`	Review	10	2026-05-25
`3.5.38`	Review	10	2026-05-24
`3.5.39`	Review	10	2026-05-24

Block this in CI

PkgRadar gates @mlightcad/libredwg-converter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mlightcad/[email protected]