PkgRadar

npm · registry.npmjs.org

@vultisig/sdk

Large Javascript Payload: 2696536 bytes

Why PkgRadar flagged 1.4.0

SeveritySignalEvidence
mediumLarge Javascript Payload2696536 bytes · package/dist/index.browser.js
mediumLarge Javascript Payload2692821 bytes · package/dist/index.chrome-extension.js
mediumLarge Javascript Payload3025891 bytes · package/dist/index.electron-main.cjs
mediumLarge Javascript Payload3025550 bytes · package/dist/index.node.cjs
mediumLarge Javascript Payload3014561 bytes · package/dist/index.node.esm.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.2.2Low risk02026-06-12
2.2.1Low risk02026-06-12
2.2.0Low risk02026-06-11
2.1.0Low risk02026-06-11
2.0.0Low risk02026-06-11
1.8.11Low risk02026-06-10
1.8.10Low risk02026-06-10
1.8.9Low risk02026-06-10
1.8.8Low risk02026-06-10
1.8.7Low risk02026-06-09
1.8.6Low risk02026-06-08
1.8.5Low risk02026-06-08
1.8.4Low risk02026-06-07
1.8.3Low risk02026-06-06
1.8.2Low risk02026-06-05
1.8.1Low risk02026-06-04
1.8.0Low risk02026-06-03
1.6.0Low risk02026-06-02
1.7.0Low risk02026-06-02
1.5.0Low risk02026-05-28
1.4.0Review352026-05-28
1.3.0Review352026-05-28
1.3.1Review352026-05-28
1.2.0Review352026-05-27
1.2.1Review352026-05-27
1.1.3Review352026-05-26
1.1.2Review502026-05-25
1.1.1Review502026-05-25
1.1.0Review502026-05-24
0.28.0Review502026-05-24
1.0.0Review502026-05-24

Block this in CI

PkgRadar gates @vultisig/sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vultisig/[email protected]