Composer · packagist.org
humanmade/local-server
Credential file access: matched "AWS_ACCESS_KEY"
Why PkgRadar flagged 26.0.10
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched "AWS_ACCESS_KEY" · humanmade-altis-local-server-fa8a4fd/inc/composer/class-command.php |
| medium | Composer Abandoned Package | Packagist marked this package abandoned — maintainer signaled it should not be used. |
| medium | Remote Payload | matched "github.com/FiloSottile/mkcert/releases/download" · humanmade-altis-local-server-fa8a4fd/inc/composer/class-command.php |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
26.0.10 | Review | 18 | 2026-06-05 |
25.0.13 | Review | 5 | 2026-06-05 |
Block this in CI
pkgradar gate --ecosystem composer humanmade/[email protected]