Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@elaraai/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@elaraai/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Large Javascript Payload: 4916297 bytes
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 20 · status changed
Evidence
Static findings
2 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Large Javascript Payload | package/dist/index.cjs | 4916297 bytes | 10 |
| medium | Large Javascript Payload | package/dist/index.js | 4876813 bytes | 10 |
Manifest
Package metadata
Scripts11
buildvite buildchakra:typegenchakra typegen src/theme/index.ts --strictchakra:typegen:watchchakra typegen src/theme/index.ts --strict --watch src/themelinteslint .lint:fixeslint . --fixprebuildpnpm chakra:typegensnapshottsx scripts/snapshot.tstestnode --import tsx --test-reporter=spec --test test/**/*.spec.ts && vitest runtest:componentsvitest runtest:watchnode --import tsx --test-reporter=spec --test --watch test/**/*.spec.tstypechecktsc --noEmit
Dependencies33
@chakra-ui/charts^3.30.0@chakra-ui/react^3.0.0@emotion/react^11.14.0@fontsource-variable/dm-sans^5.2.0@fontsource-variable/inter-tight^5.2.0@fontsource-variable/jetbrains-mono^5.2.0@fortawesome/fontawesome-svg-core^7.1.0@fortawesome/free-brands-svg-icons^7.1.0@fortawesome/free-regular-svg-icons^7.1.0@fortawesome/free-solid-svg-icons^7.1.0@fortawesome/react-fontawesome^3.1.1@internationalized/date^3.8.0@radix-ui/react-scroll-area^1.2.10@react-aria/datepicker^3.14.0@react-aria/i18n^3.12.8@react-stately/datepicker^3.14.0@tanstack/react-query^5.62.0@tanstack/react-table^8.21.3@tanstack/react-virtual^3.13.9@use-gesture/react^10.3.1@visx/axis^3.12.0@visx/curve^3.12.0@visx/grid^3.12.0@visx/group^3.12.0@visx/responsive^3.12.0@visx/scale^3.12.0@visx/shape^3.12.0@visx/tooltip^3.12.0react-markdown^9.0.0recharts3.5.1- …and 3 more.