PkgRadar

npm · registry.npmjs.org

@vercel/node

Large Javascript Payload: 4272797 bytes

Why PkgRadar flagged 5.8.6

SeveritySignalEvidence
mediumLarge Javascript Payload4272797 bytes · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
5.8.17Low risk02026-06-11
5.8.16Low risk02026-06-11
1.5.2-canary.9Low risk02026-06-10
5.8.15Low risk02026-06-10
1.6.1Low risk02026-06-10
1.6.1-canary.0Low risk02026-06-10
5.8.14Low risk02026-06-08
5.8.13Low risk02026-06-08
5.8.12Low risk02026-06-04
5.8.11Low risk02026-06-03
5.8.10Low risk02026-06-03
5.8.9Low risk02026-06-01
5.8.8Low risk02026-05-29
5.8.7Low risk02026-05-28
5.8.6Review32026-05-28
5.8.5Review32026-05-27
5.8.4Review32026-05-27

Block this in CI

PkgRadar gates @vercel/node (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vercel/[email protected]