PkgRadar

npm · registry.npmjs.org

@tinacms/mdx

Large Javascript Payload: 2009746 bytes

Why PkgRadar flagged 2.1.5

SeveritySignalEvidence
mediumLarge Javascript Payload2009746 bytes · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.1.6Low risk02026-06-01
0.0.0-c7b366c-20260601003355Low risk02026-06-01
2.1.5Review32026-05-25
0.0.0-bffa99c-20260525230922Review32026-05-25
0.0.0-0509095-20260525122024Review32026-05-25
0.0.0-81f24ba-20260525104117Review102026-05-25
0.0.0-7536de9-20260525064530Review102026-05-25
0.0.0-825a71d-20260525061915Review102026-05-25
0.0.0-8ac0776-20260525055947Review102026-05-25
0.0.0-9e5a59f-20260525054659Review102026-05-25
0.0.0-07a221c-20260525045811Review102026-05-25
0.0.0-3f8607c-20260525034553Review102026-05-25
0.0.0-638b47a-20260525024305Review102026-05-25
0.0.0-ae1ab5d-20260523024646Review102026-05-25
0.0.0-0e99bec-20260525001208Review102026-05-25

Block this in CI

PkgRadar gates @tinacms/mdx (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @tinacms/[email protected]