npm · registry.npmjs.org

@proofkit/cli

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 2.2.2-beta.0

Severity	Signal	Evidence
medium	Obfuscation Density	high encoded/escaped-token density · package/dist/dist-CN2zLwm2.js
medium	Obfuscation Density	high encoded/escaped-token density · package/dist/estree-DcacFgP6.js
medium	Obfuscation Density	high encoded/escaped-token density · package/dist/flow-DBJGyFa6.js
medium	Obfuscation Density	high encoded/escaped-token density · package/dist/markdown-7aL5C3vY.js
medium	Large Javascript Payload	6314316 bytes · package/dist/fmdapi-Xq9PSDNP.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.2.2-beta.0`	Review	18	2026-05-28
`2.2.2`	Review	18	2026-05-28

Block this in CI

PkgRadar gates @proofkit/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @proofkit/[email protected]