PkgRadar

Composer · packagist.org

halleck45/ast-metrics

Php Remote Fetch Exec Combo, Remote Payload

Why PkgRadar flagged v0.0.2

SeveritySignalEvidence
highPhp Remote Fetch Exec Combo
mediumRemote Payload

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
v0.0.2High risk472026-07-01

Block this in CI

PkgRadar gates halleck45/ast-metrics (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer halleck45/[email protected]
halleck45/ast-metrics — Composer security scan | PkgRadar