PkgRadar

Composer · packagist.org

ci4-cms-erp/ci4ms

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.32.0.0

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · ci4-cms-erp-ci4ms-bef25c4/modules/Settings/Libraries/UpdateService.php

Scanned versions

VersionVerdictScoreScanned (UTC)
0.32.0.0Review62026-06-02

Block this in CI

PkgRadar gates ci4-cms-erp/ci4ms (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer ci4-cms-erp/[email protected]