PkgRadar

Composer · packagist.org

alves/nfse-php-brazil

Remote Payload: matched "Curl "

Why PkgRadar flagged v1.1.0

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · andersonav-nfse-php-brazil-c9b615a/src/RestCurl.php
mediumRemote Payloadmatched "Curl\n" · andersonav-nfse-php-brazil-c9b615a/src/Tools.php
mediumLarge Native Blob12662688 bytes · andersonav-nfse-php-brazil-c9b615a/storage/municipios-catalog.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.1.0Review342026-06-04
v1.2.0Review342026-06-04

Block this in CI

PkgRadar gates alves/nfse-php-brazil (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer alves/[email protected]