Package evidence

@clickview/[email protected]

Large Javascript Payload: 2379618 bytes

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@clickview/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@clickview/[email protected]"],"fail_on":"review"}'

Publisherclickview-ship-it

Artifact bytes13,154,416

Previous version0.95.0

Published2026-05-25T06:47:08.027Z

SHA-256793c2ed6ef6e4619f14dbf99ec00c870cd1d889768c02af21517e5b0e96362e3

Why flagged

What the scanner saw

Large Javascript Payload: 2379618 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

23d agoLast checked

reviewRisk

87Score

0.95.1-dev.0Version

Status history (1 event)

new → available23d ago · risk review · score 87 · status changed

Evidence

Static findings

26 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	Large Javascript Payload	package/dist/scripts/app-BPAHIViU.js	2379618 bytes	10

Show all 26 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
medium	Large Javascript Payload	package/dist/scripts/app-BPAHIViU.js	2379618 bytes	10
low	Credential file access	package/dist/scripts/DFGufE5C.chunk.js	matched ".azure"	5
low	Obfuscation	package/dist/scripts/-Lsrkvuf.chunk.js	matched "\\u2028"	3
low	Obfuscation	package/dist/scripts/B_Wo7_1R.chunk.js	matched "\\u0080"	3
low	Obfuscation	package/dist/scripts/BQlJBjcD.chunk.js	matched "\\u000c"	3
low	Obfuscation	package/dist/scripts/BXJ3-DJS.chunk.js	matched "\\u007E"	3
low	Obfuscation	package/dist/scripts/C9zcyjuU.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/CFRBy_I-.chunk.js	matched "atob("	3
low	Obfuscation	package/dist/scripts/CHsEOL8G.chunk.js	matched "atob("	3
low	Obfuscation	package/dist/scripts/Cmu1J2M7.chunk.js	matched "\\x00"	3
low	Obfuscation	package/dist/scripts/CqChA3CS.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/CRoTJJ57.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/CsFm5M3D.chunk.js	matched "\\u200B"	3
low	Obfuscation	package/dist/scripts/CZys9CeT.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/D1-G2Taa.chunk.js	matched "\\ud800"	3
low	Obfuscation	package/dist/scripts/D8sFtdJF.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/DcYG-KVC.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/DKSlcfSE.chunk.js	matched "Buffer.from(s,\"base64"	3
low	Obfuscation	package/dist/scripts/DP496YkG.chunk.js	matched "\\uFEFF"	3
low	Obfuscation	package/dist/scripts/DqC55TAG.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/Ds_PduCx.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/DXmiGQNf.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/fAR-Xikm.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/i6Py-Fdb.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/oE16sEOL.chunk.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/scripts/pdf.worker.min-qwK7q_zL.mjs	matched "fromCharCode"	3

Manifest

Package metadata

Scripts5

buildnpm run type-check && vite build
startvite
testjest
test-watchjest --watch
type-checktsc --noEmit

Dependencies13

@amplitude/analytics-browser2.24.0
@amplitude/plugin-session-replay-browser1.22.13
@googlemaps/js-api-loader1.15.1
@microsoft/immersive-reader-sdk1.0.0
@microsoft/teams-js2.22.0
intersection-observer0.11.0
js-cookie2.2.1
papaparse5.2.0
print-js1.5.0
react-qrcode-logo3.0.0
redux-devtools-extension2.13.8
spark-md53.0.2
tsparticles-confetti2.12.0