Composer · packagist.org

ecodev/felix

Php Backtick Shell: Backtick shell-out with variable interpolation.

Why PkgRadar flagged 17.0.2

Severity	Signal	Evidence
medium	Php Backtick Shell	Backtick shell-out with variable interpolation. · Ecodev-felix-0c5f3d1/src/Service/Bvr.php
medium	Php Backtick Shell	Backtick shell-out with variable interpolation. · Ecodev-felix-0c5f3d1/src/Service/DataRestorer.php
medium	Php Shell Call	exec / system / passthru / shell_exec / proc_open — process spawning. · Ecodev-felix-0c5f3d1/src/DBAL/Logging/Connection.php
medium	Php Shell Call	exec / system / passthru / shell_exec / proc_open — process spawning. · Ecodev-felix-0c5f3d1/src/Service/AbstractDatabase.php
medium	Php Shell Call	exec / system / passthru / shell_exec / proc_open — process spawning. · Ecodev-felix-0c5f3d1/src/Service/Mailer.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`17.0.2`	Review	25	2026-05-27

Block this in CI

PkgRadar gates ecodev/felix (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer ecodev/[email protected]