Loading the latest scan…
Composer · packagist.org
Composer Abandoned Package, Remote Payload, Composer Install Scripts Present
Why PkgRadar flagged v5.0.0-alpha.2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Composer Abandoned Package | — |
| medium | Remote Payload | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v5.0.0-alpha.2 | Review | 9 | 2026-07-12 |
v4.4.0-alpha.3 | Review | 5 | 2026-07-12 |
v4.3.17 | Review | 5 | 2026-07-12 |
v4.3.16 | Review | 5 | 2026-07-03 |
v4.4.0-alpha.2 | Review | 9 | 2026-06-26 |
v4.4.0-alpha.1 | Review | 9 | 2026-06-25 |
v4.3.14 | Review | 9 | 2026-06-19 |
v4.3.12 | Low risk | 0 | 2026-06-13 |
v4.3.13 | Low risk | 0 | 2026-06-13 |
v4.3.9 | Low risk | 0 | 2026-06-04 |
v4.3.8 | Low risk | 0 | 2026-06-04 |
v4.1.29 | Low risk | 0 | 2026-06-04 |
Block this in CI
pkgradar gate --ecosystem composer dunglas/[email protected]