PkgRadar

Composer · packagist.org

detain/phlex-shared

Remote Payload: matched "cURL "

Why PkgRadar flagged v0.8.1

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · detain-phlix-shared-e0bc781/src/Arr/BazarrClient.php
mediumRemote Payloadmatched "cURL " · detain-phlix-shared-e0bc781/src/Arr/ProwlarrClient.php
mediumRemote Payloadmatched "cURL " · detain-phlix-shared-e0bc781/src/Arr/RadarrClient.php
mediumRemote Payloadmatched "cURL " · detain-phlix-shared-e0bc781/src/Arr/SonarrClient.php
mediumRemote Payloadmatched "raw.githubusercontent.com" · detain-phlix-shared-e0bc781/src/Arr/TrashGuidesProvider.php
mediumRemote Payloadmatched "raw.githubusercontent.com" · detain-phlix-shared-e0bc781/tests/Arr/TrashGuidesProviderTest.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.8.1High risk722026-06-12
v0.8.0High risk722026-06-01
v0.7.0High risk722026-05-30

Block this in CI

PkgRadar gates detain/phlex-shared (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer detain/[email protected]
Start free — 25 scans / moView full evidence