PkgRadar

Composer · packagist.org

allstak/sdk-php

Remote Payload: matched "cURL "

Why PkgRadar flagged v1.4.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · AllStak-allstak-php-sdk-2f7e9de/sample-app/validate-sdk.php
mediumRemote Payloadmatched "curl " · AllStak-allstak-php-sdk-2f7e9de/src/Transport/HttpClient.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.4.0Review242026-05-30
v1.3.0Review242026-05-29

Block this in CI

PkgRadar gates allstak/sdk-php (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer allstak/[email protected]