PkgRadar

npm · registry.npmjs.org

xyvcard-live

Large Javascript Payload: 3286651 bytes

Why PkgRadar flagged 0.0.40

SeveritySignalEvidence
mediumLarge Javascript Payload3286651 bytes · package/dist/index-9VvXRgMU.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.48Low risk02026-06-06
0.0.47Low risk02026-06-04
0.0.46Low risk02026-06-03
0.0.45Low risk02026-06-02
0.0.44Low risk02026-05-30
0.0.43Low risk02026-05-30
0.0.42Low risk02026-05-29
0.0.41Low risk02026-05-28
0.0.40Review102026-05-28
0.0.37Low risk02026-05-27
0.0.39Review102026-05-27

Block this in CI

PkgRadar gates xyvcard-live (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence