Composer · packagist.org

halilbelkir/img-webp-convert

Remote Payload: matched "CURL "

Why PkgRadar flagged 3.10

Severity	Signal	Evidence
medium	Remote Payload	matched "CURL " · halilbelkir-webp-convert-a2acea1/src/Browser.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.10`	Review	6	2026-06-01

Block this in CI

PkgRadar gates halilbelkir/img-webp-convert (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer halilbelkir/[email protected]