PkgRadar

npm · registry.npmjs.org

@pb33f/cowboy-components

Known Indicator Filename: package/dist/model/bundle.js

Why PkgRadar flagged 0.15.6

SeveritySignalEvidence
highKnown Indicator Filenamepackage/dist/model/bundle.js · package/dist/model/bundle.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/chunk-727SXJPM-DrHYO_NK.cjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/flowDiagram-I6XJVG4X-BS6YB3Is.cjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/chunk-727SXJPM-CKVOoL4f.js
mediumRemote Payloadmatched "curl " · package/dist/model/licenses.json
mediumLarge Javascript Payload2116461 bytes · package/dist/change-list-item-ZM-OUodW.js
mediumLarge Javascript Payload2348379 bytes · package/dist/cowboy-components-D0TUKy4f.js
mediumLarge Javascript Payload2355162 bytes · package/dist/workers/elk-fake-worker.generated.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.15.6Review362026-05-27
0.15.7Review362026-05-27

Block this in CI

PkgRadar gates @pb33f/cowboy-components (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pb33f/[email protected]