PkgRadar

npm · registry.npmjs.org

@univerjs/engine-render

Large Javascript Payload: 5782487 bytes

Why PkgRadar flagged 0.24.0-insiders.20260528-29f582d

SeveritySignalEvidence
mediumLarge Javascript Payload5782487 bytes · package/lib/umd/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.25.0-insiders.20260616-2400e02Low risk02026-06-16
0.25.0-insiders.20260615-6fa82a8Low risk02026-06-15
0.25.0-insiders.20260615-e62bcd3Low risk02026-06-15
0.25.0-insiders.20260613-01a91f0Low risk02026-06-13
0.25.0-insiders.20260613-a210f12Low risk02026-06-13
0.25.0-insiders.20260613-5ff0e1fLow risk02026-06-13
0.25.0-insiders.20260608-e4336f7Low risk02026-06-08
0.25.0-insiders.20260604-29ebbffLow risk02026-06-04
0.25.0Low risk02026-05-30
0.24.0-insiders.20260530-57a0a3eLow risk02026-05-30
0.24.0-insiders.20260530-98808abLow risk02026-05-30
0.24.0-insiders.20260528-29f582dReview32026-05-28
0.24.0Review32026-05-27
0.24.0-insiders.20260527-b1d726fReview32026-05-27

Block this in CI

PkgRadar gates @univerjs/engine-render (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @univerjs/[email protected]