PkgRadar

npm · registry.npmjs.org

cfo-ui

Large Javascript Payload: 7010226 bytes

Why PkgRadar flagged 1.0.7

SeveritySignalEvidence
mediumLarge Javascript Payload7010226 bytes · package/dist/assets/ts.worker-BH9nVgjN.js
mediumLarge Javascript Payload3794963 bytes · package/dist/assets/vendor-monaco-D563_ubo.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.11Low risk02026-06-12
1.0.10Low risk02026-06-08
1.0.9Low risk02026-05-31
1.0.8Low risk02026-05-29
1.0.7Review202026-05-26
1.0.5Review202026-05-26
1.0.6Review202026-05-26

Block this in CI

PkgRadar gates cfo-ui (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]