PkgRadar

Composer · packagist.org

capell-app/core

Remote Payload, Suspicious Publish Context

Why PkgRadar flagged v0.0.1

SeveritySignalEvidence
mediumRemote Payload
mediumSuspicious Publish Context

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.1Review222026-07-11

Block this in CI

PkgRadar gates capell-app/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer capell-app/[email protected]
capell-app/core — Composer security scan | PkgRadar