PkgRadar

npm · registry.npmjs.org

@zsviczian/excalidraw

Large Javascript Payload: 19602983 bytes

Why PkgRadar flagged 0.18.0-94

SeveritySignalEvidence
mediumLarge Javascript Payload19602983 bytes · package/dist/excalidraw.development.js
mediumLarge Javascript Payload8378298 bytes · package/dist/excalidraw.production.min.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.18.101Low risk02026-06-12
0.18.101-beta.1Low risk02026-06-10
0.18.101-beta.0Low risk02026-06-09
0.18.100Low risk02026-06-07
0.18.99Low risk02026-06-07
0.18.98Low risk02026-06-06
0.18.97Low risk02026-06-02
0.18.96Low risk02026-06-02
0.18.95Low risk02026-06-02
0.18.0-94Review102026-05-28
0.18.0-92Review102026-05-26
0.18.0-93Review102026-05-26

Block this in CI

PkgRadar gates @zsviczian/excalidraw (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @zsviczian/[email protected]
Start free — 25 scans / moView full evidence