npm · registry.npmjs.org

@volcengine/veplayer-plugin

Large Javascript Payload: 7569627 bytes

Why PkgRadar flagged 2.10.4-rc.4

Severity	Signal	Evidence
medium	Large Javascript Payload	7569627 bytes · package/esm/index.development.js
medium	Large Javascript Payload	4454179 bytes · package/esm/index.production.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.12.0-rc.1`	Low risk	0	2026-06-16
`2.4.0`	Low risk	0	2026-06-16
`2.12.0`	Low risk	0	2026-06-02
`2.10.4-rc.4`	Review	10	2026-05-25
`2.12.0-rc.2`	Review	10	2026-05-25

Block this in CI

PkgRadar gates @volcengine/veplayer-plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @volcengine/[email protected]