Composer · packagist.org

basic-hub/es-core

Remote Payload: matched "Curl "

Why PkgRadar flagged 3.0.117

Severity	Signal	Evidence
medium	Remote Payload	matched "Curl " · basic-hub-es-core-88e617e/src/Common/Http/HCurl.php
medium	Remote Payload	matched "Curl " · basic-hub-es-core-88e617e/src/function.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.0.117`	Review	7	2026-06-16
`3.0.113`	Review	13	2026-05-27

Block this in CI

PkgRadar gates basic-hub/es-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer basic-hub/[email protected]