PkgRadar

Composer · packagist.org

coagus/php-api-builder

Remote Payload: matched "cUrl "

Why PkgRadar flagged v2.0.0-beta.3

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · coagus-php-api-builder-ea28a38/src/OpenAPI/DocsController.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v2.0.0-beta.3Review62026-06-01

Block this in CI

PkgRadar gates coagus/php-api-builder (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer coagus/[email protected]
coagus/php-api-builder — Composer security scan | PkgRadar