Package evidence

@cadian/[email protected]

Large Javascript Payload: 4423675 bytes

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 3
Versions published: 2
First published: Mar 2026
Publisher: cadian

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@cadian/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@cadian/[email protected]"],"fail_on":"review"}'

Publishercadian

Artifact bytes7,391,030

Previous versionnone

Published2026-03-19T02:47:12.836Z

SHA-2564755136bb59363cd128ae11aee2ac5029d6f4d6a7292eefd7cf361abeddd7f3c

Why flagged

What the scanner saw

Large Javascript Payload: 4423675 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

18d agoLast checked

reviewRisk

10Score

1.0.0Version

Status history (1 event)

new → available18d ago · risk review · score 10 · status changed

Evidence

Static findings

1 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	Large Javascript Payload	package/dist/@cadian/ui.js	4423675 bytes	10

Manifest

Package metadata

Scripts56

api-collectionantd-tools run api-collection
authorstsx scripts/generate-authors.ts
biomebiome check --write
buildnpm run compile && cross-env NODE_OPTIONS=--max-old-space-size=4096 npm run dist
changelognpm run lint:changelog && tsx scripts/print-changelog.ts
cleanantd-tools run clean && rimraf es lib coverage locale dist report.html artifacts.zip oss-artifacts.zip
clean:lockfilesrimraf package-lock.json yarn.lock
compilenpm run compileOnly
compileOnlynpm run clean && antd-tools run compile
deploygh-pages -d _site -b gh-pages -f
deploy:china-mirrorgit checkout gh-pages && git pull origin gh-pages && git push [email protected]:ant-design/ant-design.git gh-pages -f
distnpm run ut-install-react-18 && antd-tools run dist
formatbiome format --write .
install-react-18npm i --no-save --legacy-peer-deps react@18 react-dom@18 @testing-library/react@16
lintnpm run version && npm run tsc && npm run lint:script && npm run lint:biome && npm run lint:md && npm run lint:changelog
lint:biomebiome lint
lint:changelogtsx scripts/generate-component-changelog.ts
lint:mdremark . -f -q
lint:scripteslint . --cache
lint:styletsx scripts/check-cssinjs.tsx
postpublishtsx scripts/post-publish.ts
precompilenpm run prestart
predeployantd-tools run clean && npm run site && cp CNAME _site && npm run test:site
predistnpm run version && npm run token:statistic && npm run token:meta && npm run style
prelintdumi setup
prepareis-ci || husky && dumi setup
prepublishOnlynpm run build
presitenpm run prestart && npm run style -- --layer='@layer theme, base, global, antd, components, utilities;'
prestartnpm run version && npm run token:statistic && npm run token:meta && npm run lint:changelog && npm run style
pretestnpm run version
…and 26 more.

Dependencies48

@ant-design/colors^8.0.1
@ant-design/cssinjs^2.1.2
@ant-design/cssinjs-utils^2.1.2
@ant-design/fast-color^3.0.1
@ant-design/icons^6.1.0
@ant-design/react-slick~2.0.0
@babel/runtime^7.28.4
@rc-component/cascader~1.14.0
@rc-component/checkbox~2.0.0
@rc-component/collapse~1.2.0
@rc-component/color-picker~3.1.1
@rc-component/dialog~1.8.4
@rc-component/drawer~1.4.2
@rc-component/dropdown~1.0.2
@rc-component/form~1.7.2
@rc-component/image~1.6.0
@rc-component/input~1.1.2
@rc-component/input-number~1.6.2
@rc-component/mentions~1.6.0
@rc-component/menu~1.2.0
@rc-component/motion^1.3.1
@rc-component/mutate-observer^2.0.1
@rc-component/notification~1.2.0
@rc-component/pagination~1.2.0
@rc-component/picker~1.9.1
@rc-component/progress~1.0.2
@rc-component/qrcode~1.1.1
@rc-component/rate~1.0.1
@rc-component/resize-observer^1.1.1
@rc-component/segmented~1.3.0
…and 18 more.