npm · registry.npmjs.org

shipnow-mercurio

Large Javascript Payload: 4325716 bytes

Why PkgRadar flagged 0.9.236

Severity	Signal	Evidence
medium	Large Javascript Payload	4325716 bytes · package/dist/index.es.js
medium	Large Javascript Payload	4346962 bytes · package/dist/index.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.9.239`	Low risk	0	2026-06-03
`0.9.238`	Low risk	0	2026-06-02
`0.9.236`	Review	6	2026-05-26
`0.9.237`	Review	6	2026-05-26

Block this in CI

PkgRadar gates shipnow-mercurio (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]