PkgRadar

npm · registry.npmjs.org

@playcanvas/splat-transform

Large Javascript Payload: 4289723 bytes

Why PkgRadar flagged 2.4.0

SeveritySignalEvidence
mediumLarge Javascript Payload4289723 bytes · package/dist/index.cjs
mediumLarge Javascript Payload4692793 bytes · package/dist/cli.mjs
mediumLarge Javascript Payload4281811 bytes · package/dist/index.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
2.5.2Low risk02026-06-04
2.5.1Low risk02026-06-03
2.5.0Low risk02026-06-03
2.4.0Review92026-05-26
2.3.2Review92026-05-26
2.3.0Review302026-05-24
2.3.1Review302026-05-24

Block this in CI

PkgRadar gates @playcanvas/splat-transform (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @playcanvas/[email protected]
Start free — 25 scans / moView full evidence