PkgRadar

Composer · packagist.org

joaomfrebelo/saft-pt_4_php

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 3.0.0-RC1

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · joaomfrebelo-Saft-PT_4_PHP-824f747/src/Rebelo/SaftPt/AuditFile/AuditFile.php
mediumRemote Payloadmatched "raw.githubusercontent.com" · joaomfrebelo-Saft-PT_4_PHP-824f747/tests/Rebelo/SaftPt/AuditFile/SourceDocuments/WorkingDocuments/DocumentStatusTest.php
mediumRemote Payloadmatched "raw.githubusercontent.com" · joaomfrebelo-Saft-PT_4_PHP-824f747/tests/Rebelo/SaftPt/AuditFile/SourceDocuments/WorkingDocuments/DocumentTotalsTest.php

Scanned versions

VersionVerdictScoreScanned (UTC)
3.0.0-RC1High risk252026-06-15

Block this in CI

PkgRadar gates joaomfrebelo/saft-pt_4_php (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer joaomfrebelo/[email protected]
Start free — 25 scans / moView full evidence