Composer · packagist.org

heroku/heroku-buildpack-php

Composer Install Scripts Present: composer.json declares pre/post install/update scripts — execute on composer install.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v292`	Review	1	2026-06-09

Block this in CI

PkgRadar gates heroku/heroku-buildpack-php (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer heroku/heroku-buildpack-php@v292