Composer · packagist.org

averay/twig-extensions

Php Assert String Exec: assert() called with a variable — PHP's deprecated string-exec backdoor.

Why PkgRadar flagged 0.3.0

Severity	Signal	Evidence
high	Php Assert String Exec	assert() called with a variable — PHP's deprecated string-exec backdoor. · adamaveray-twig-extensions-4777091/src/Nodes/AssertNode.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.3.0`	High risk	28	2026-05-30

Related campaigns

Block this in CI

PkgRadar gates averay/twig-extensions (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer averay/[email protected]