Package evidence

[email protected]

Large Javascript Payload: 6069633 bytes

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 9,837Niche · −30% score
Versions published: 378Mature · −50% score
First published: Aug 2014
Publisher: swagger-api

Effective trust discount applied: −50% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Looks clean — keep monitoring

No high-signal indicators in the stored static report. PkgRadar will re-check on the next ingest pass.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'

Publisherswagger-api

Artifact bytes10,352,819

Previous version5.6.1

Published2026-06-03T08:30:53.145Z

SHA-256800d38d1af09217ffda4de7a5a3c55092ec62a904a4462a859af8d85346cbef7

Why flagged

What the scanner saw

Large Javascript Payload: 6069633 bytes

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

low

14d agoLast checked

lowRisk

0Score

5.6.2Version

Status history (1 event)

new → available14d ago · risk low · score 0 · status changed

Evidence

Static findings

5 static · 0 from release diff · showing high-signal first.

No high-signal findings — see all findings below.

Show all 5 findings (low-signal and informational)

Severity	Kind	Path	Detail
low	Large Javascript Payload	package/dist/esm/apidom.worker.js	6069633 bytes
low	Large Javascript Payload	package/dist/umd/apidom.worker.js	5255990 bytes
low	Large Javascript Payload	package/dist/esm/asyncapi-parser.worker.js	3056163 bytes
low	Large Javascript Payload	package/dist/umd/asyncapi-parser.worker.js	2539020 bytes
low	Large Javascript Payload	package/dist/umd/swagger-editor.js	15983456 bytes

Manifest

Package metadata

Scripts24

buildnpm run build:app && npm run build:bundle:esm && npm run build:bundle:umd && npm run build:definitions
build:appcross-env NODE_OPTIONS=--max_old_space_size=8192 vite build --config vite.config.app.js
build:app:servevite preview --outDir build --port 3050
build:bundle:esmrimraf ./dist/esm && cross-env NODE_OPTIONS=--max_old_space_size=4096 node vite/scripts/build-bundle-esm.js && rimraf ./dist/esm/swagger-editor.css*
build:bundle:umdrimraf ./dist/umd ./dist/swagger-editor.css && cross-env NODE_OPTIONS=--max_old_space_size=4096 node vite/scripts/build-bundle-umd.js && copyfiles -u 2 ./dist/umd/swagger-editor.css ./dist && rimraf ./dist/umd/swagger-editor.css
build:definitionstsc -p tsconfig.json
cleanrimraf ./build ./dist
link:apidomnpm link @swagger-api/apidom-ast @swagger-api/apidom-core @swagger-api/apidom-error @swagger-api/apidom-json-path @swagger-api/apidom-json-pointer @swagger-api/apidom-ls @swagger-api/apidom-ns-api-design-systems @swagger-api/apidom-ns-asyncapi-2 @swagger-api/apidom-ns-json-schema-draft-4 @swagger-api/apidom-ns-json-schema-draft-6 @swagger-api/apidom-ns-json-schema-draft-7 @swagger-api/apidom-ns-openapi-2 @swagger-api/apidom-ns-openapi-3-0 @swagger-api/apidom-ns-openapi-3-1 @swagger-api/apidom-ns-openapi-3-2 @swagger-api/apidom-ns-openapi-3-2 @swagger-api/apidom-parser-adapter-api-design-systems-json @swagger-api/apidom-parser-adapter-api-design-systems-yaml @swagger-api/apidom-parser-adapter-asyncapi-json-2 @swagger-api/apidom-parser-adapter-asyncapi-yaml-2 @swagger-api/apidom-parser-adapter-json @swagger-api/apidom-parser-adapter-openapi-json-2 @swagger-api/apidom-parser-adapter-openapi-json-3-0 @swagger-api/apidom-parser-adapter-openapi-json-3-1 @swagger-api/apidom-parser-adapter-openapi-json-3-2 @swagger-api/apidom-parser-adapter-openapi-yaml-2 @swagger-api/apidom-parser-adapter-openapi-yaml-3-0 @swagger-api/apidom-parser-adapter-openapi-yaml-3-1 @swagger-api/apidom-parser-adapter-openapi-yaml-3-2 @swagger-api/apidom-parser-adapter-yaml-1-2 @swagger-api/apidom-parser @swagger-api/apidom-reference
link:apidom-lsnpm link @swagger-api/apidom-ls
linteslint . --ext .jsx,.js,.tsx,.ts
lint:fixeslint . --ext .jsx,.js,.tsx,.ts --fix
preparepatch-package
pw:ciplaywright test
pw:dev:servercross-env ENABLE_PROGRESS_PLUGIN=false vite --port 3000
pw:installplaywright install --with-deps chromium
pw:reportplaywright show-report test/playwright/report
pw:testplaywright test
pw:test:debugplaywright test --debug
pw:test:headedplaywright test --headed
pw:test:uiplaywright test --ui
startcross-env DISABLE_ESLINT_PLUGIN=false ENABLE_PROGRESS_PLUGIN=true vite
testvitest
test:coveragevitest run --coverage
test:runvitest run

Dependencies63

@asyncapi/avro-schema-parser3.0.24
@asyncapi/openapi-schema-parser3.0.24
@asyncapi/parser3.6.0
@asyncapi/protobuf-schema-parser3.6.0
@asyncapi/react-component3.1.1
@codingame/monaco-vscode-api=31.0.1
@emotion/react^11.14.0
@emotion/styled^11.14.0
@mui/material^5.16.9
@primer/octicons-react^19.15.2
@swagger-api/apidom-core1.11.2
@swagger-api/apidom-json-pointer1.11.2
@swagger-api/apidom-ls1.11.2
@swagger-api/apidom-ns-api-design-systems1.11.2
@swagger-api/apidom-ns-openapi-21.11.2
@swagger-api/apidom-ns-openapi-3-01.11.2
@swagger-api/apidom-ns-openapi-3-11.11.2
@swagger-api/apidom-ns-openapi-3-21.11.2
@swagger-api/apidom-parser-adapter-api-design-systems-json1.11.2
@swagger-api/apidom-parser-adapter-api-design-systems-yaml1.11.2
@swagger-api/apidom-parser-adapter-asyncapi-json-21.11.2
@swagger-api/apidom-parser-adapter-asyncapi-yaml-21.11.2
@swagger-api/apidom-parser-adapter-json1.11.2
@swagger-api/apidom-parser-adapter-openapi-json-21.11.2
@swagger-api/apidom-parser-adapter-openapi-json-3-01.11.2
@swagger-api/apidom-parser-adapter-openapi-json-3-11.11.2
@swagger-api/apidom-parser-adapter-openapi-json-3-21.11.2
@swagger-api/apidom-parser-adapter-openapi-yaml-21.11.2
@swagger-api/apidom-parser-adapter-openapi-yaml-3-01.11.2
@swagger-api/apidom-parser-adapter-openapi-yaml-3-11.11.2
…and 33 more.