PkgRadar

npm · registry.npmjs.org

speed5

Large Javascript Payload: 5400022 bytes

Why PkgRadar flagged 1.1.7

SeveritySignalEvidence
mediumLarge Javascript Payload5400022 bytes · package/assets/73sxysj46r.js
mediumLarge Javascript Payload5400022 bytes · package/tmp_speed4/assets/73sxysj46r.js
mediumLarge Javascript Payload5400022 bytes · package/tmp_speed4/tmp_speed3/assets/73sxysj46r.js
mediumLarge Javascript Payload5400022 bytes · package/tmp_speed4/tmp_speed3/tmp_speed2/assets/73sxysj46r.js
mediumLarge Javascript Payload5400022 bytes · package/tmp_speed4/tmp_speed3/tmp_speed2/tmp_speed1/assets/73sxysj46r.js
mediumLarge Javascript Payload5965363 bytes · package/assets/mh5v4t7fxj.js
mediumLarge Javascript Payload5965363 bytes · package/tmp_speed4/assets/mh5v4t7fxj.js
mediumLarge Javascript Payload5965363 bytes · package/tmp_speed4/tmp_speed3/assets/mh5v4t7fxj.js
mediumLarge Javascript Payload5965363 bytes · package/tmp_speed4/tmp_speed3/tmp_speed2/assets/mh5v4t7fxj.js
mediumLarge Javascript Payload5965363 bytes · package/tmp_speed4/tmp_speed3/tmp_speed2/tmp_speed1/assets/mh5v4t7fxj.js
mediumLarge Javascript Payload6234818 bytes · package/assets/xbal01i589.js
mediumLarge Javascript Payload6234818 bytes · package/tmp_speed4/assets/xbal01i589.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.7Review1002026-05-27

Block this in CI

PkgRadar gates speed5 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]