npm · registry.npmjs.org

pm-workflow-studio

Large Javascript Payload: 3164970 bytes

Why PkgRadar flagged 0.2.1

Severity	Signal	Evidence
medium	Large Javascript Payload	3164970 bytes · package/.claude/skills/pm-workflow/assets/vendor/flow-viewer/mermaid.min.js
medium	Large Javascript Payload	3164970 bytes · package/.codex/assets/vendor/flow-viewer/mermaid.min.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2.0.0`	Low risk	0	2026-06-10
`0.2.1`	Review	20	2026-05-26
`0.1.6`	Review	20	2026-05-26
`0.1.8`	Review	20	2026-05-26

Block this in CI

PkgRadar gates pm-workflow-studio (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]