PkgRadar

Composer · packagist.org

develia/commons

Remote Payload: matched "cURL "

Why PkgRadar flagged 0.9.4

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · develia-develia.commons.php-ead29343b27d/develia.php

Scanned versions

VersionVerdictScoreScanned (UTC)
0.9.4Review62026-06-11
0.9.3Review62026-06-05
0.9.2Review62026-06-02
0.9.1Review62026-06-02
0.8.55Review62026-05-31
0.3.53Review62026-05-31
0.8.53Review62026-05-31
0.8.54Review62026-05-31
0.8.49Review132026-05-27

Block this in CI

PkgRadar gates develia/commons (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer develia/[email protected]