Package evidence

[email protected]

Large Javascript Payload: 10222605 bytes

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'

Publisherimeik-npm

Artifact bytes6,172,058

Previous version5.4.8

Published2026-05-25T03:39:55.900Z

SHA-2563ba7a77c0d60e9583c9aba00e0e6dcc6bd1ffd93d35a63e47be4a95ec0921c99

Why flagged

What the scanner saw

Large Javascript Payload: 10222605 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review

23d agoLast checked

reviewRisk

30Score

5.4.9Version

Status history (1 event)

new → available23d ago · risk review · score 30 · status changed

Evidence

Static findings

3 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
medium	Large Javascript Payload	package/dist/imeik-imui.common.js	10222605 bytes	10
medium	Large Javascript Payload	package/dist/imeik-imui.umd.js	10223095 bytes	10
medium	Large Javascript Payload	package/dist/imeik-imui.umd.min.js	5538883 bytes	10

Manifest

Package metadata

Scripts15

buildnode ./script/serve-compat.js build --mode prod --cdn
build:devnode ./script/serve-compat.js build --mode dev --cdn
build:imuivue-cli-service build --target lib --name imeik-imui ./src/imui/index.js
build:prenode ./script/serve-compat.js build --mode pre --cdn
build:prodnode ./script/serve-compat.js build --mode prod --cdn
build:testnode ./script/serve-compat.js build --mode test --cdn
copy:imuicp -R src/imui dist/imui
devnode ./script/serve-compat.js --mode dev
lintvue-cli-service lint
serve:devnode ./script/serve-compat.js --mode dev
serve:prenode ./script/serve-compat.js --mode pre
serve:prodnode ./script/serve-compat.js --mode prod
serve:testnode ./script/serve-compat.js --mode test
svgosvgo -f src/icons/svg --config=src/icons/svgo.yml
uvcross-env node ./script/update.version.js

Dependencies30

@wangeditor/editor^5.0.0
@wangeditor/editor-for-vue^1.0.0
ali-oss^6.17.1
aliyunoss-webpack-plugin^0.2.1
axios^0.19.2
core-js^3.19.1
crypto-js^4.1.1
el-table-virtual-scroll^2.0.1
element-ui^2.15.7
imeik-bizui^2.2.5
js-cookie^2.2.1
lodash-es^4.17.21
moment^2.29.4
qiankun^2.10.6
qs^6.11.1
rrweb-player0.7.13
rrweb-snapshot2.0.0-alpha.5
svg-sprite-loader^5.2.1
useless-files-webpack-plugin^1.0.1
uuid^9.0.0
v-viewer^1.6.4
vue^2.6.14
vue-cropper^0.5.11
vue-json-editor^1.4.3
vue-pdf-embed^1.2.1
vue-router^3.5.3
vuedraggable^2.24.3
vuex^3.6.2
watermark-dom^2.3.0
web-report^1.0.8