PkgRadar

npm · registry.npmjs.org

@playcanvas/supersplat-viewer

Large Javascript Payload: 3395965 bytes

Why PkgRadar flagged 1.26.0

SeveritySignalEvidence
mediumLarge Javascript Payload3395965 bytes · package/dist/index.js
mediumLarge Javascript Payload2938366 bytes · package/public/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.26.2Low risk02026-06-03
1.26.1Low risk02026-06-02
1.26.0Review62026-05-27
1.25.0Review62026-05-26
1.24.0Review202026-05-24
1.24.1Review202026-05-24

Block this in CI

PkgRadar gates @playcanvas/supersplat-viewer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @playcanvas/[email protected]