npm · registry.npmjs.org

lalph

Large Javascript Payload: 7757998 bytes

Why PkgRadar flagged 0.3.134

Severity	Signal	Evidence
medium	Large Javascript Payload	7757998 bytes · package/dist/cli.mjs

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.3.137`	Low risk	0	2026-06-11
`0.3.136`	Low risk	0	2026-06-11
`0.3.135`	Low risk	0	2026-06-03
`0.3.134`	Review	3	2026-05-28
`0.3.132`	Review	3	2026-05-27
`0.3.133`	Review	3	2026-05-27

Block this in CI

PkgRadar gates lalph (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]