Package evidence

@eternalheart/[email protected]

Large Javascript Payload: 11086268 bytes

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@eternalheart/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@eternalheart/[email protected]"],"fail_on":"review"}'

Publisherwh131462

Artifact bytes12,807,226

Previous version1.3.7

Published2026-05-16T05:21:29.442Z

SHA-2564126c4931c74deafb8d132e7eb4401c59782c2b5ce288364146cdd4ce0777e42

Why flagged

What the scanner saw

Large Javascript Payload: 11086268 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

20d agoLast checked

reviewRisk

29Score

1.3.8Version

Status history (1 event)

new → available20d ago · risk review · score 29 · status changed

Evidence

Static findings

5 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	Large Javascript Payload	package/lib/index.cjs	11086268 bytes	10
medium	Large Javascript Payload	package/lib/index.mjs	11927268 bytes	10

Show all 5 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
medium	Large Javascript Payload	package/lib/index.cjs	11086268 bytes	10
medium	Large Javascript Payload	package/lib/index.mjs	11927268 bytes	10
low	Obfuscation	package/lib/chunks/index-Bk6WqXgW.mjs	matched "\\uFEFF"	3
low	Obfuscation	package/lib/chunks/index-BqOX6zlZ.mjs	matched "\\x3c"	3
low	Obfuscation	package/lib/pdfjs/pdf.worker.min.mjs	matched "fromCharCode"	3

Manifest

Package metadata

Scripts10

buildvite build && tsc --project tsconfig.json
devvite build --watch --emptyOutDir false
prepublishOnlypnpm build
pubnpm publish --registry https://registry.npmjs.com
pub:majorpnpm version:major && pnpm pub
pub:minorpnpm version:minor && pnpm pub
pub:patchpnpm version:patch && pnpm pub
version:majornpm version major
version:minornpm version minor
version:patchnpm version patch

Dependencies22

@kenjiuno/msgreader^1.28.0
@likecoin/epub-ts^0.6.0
@videojs-player/react^1.0.0
docx-preview^0.3.2
exceljs^4.4.0
foliate-js1.0.1
framer-motion^11.11.17
jszip^3.10.1
katex^0.16.45
lucide-react^0.460.0
mammoth^1.8.0
pdfjs-dist4.8.69
pptx-preview^1.0.7
react-markdown^10.1.0
react-pdf9.2.1
rehype-katex^7.0.1
rehype-raw^7.0.0
remark-gfm^4.0.1
remark-math^6.0.0
shiki^1.29.2
video.js^8.23.4
x-data-spreadsheet^1.1.9