Composer · packagist.org

linhecheng/cmlphp

Php Remote Fetch Exec Combo, Composer Abandoned Package, Remote Payload +1 more

Why PkgRadar flagged v8.1.1

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`v8.0.16`	Review	17	2026-07-29
`v8.1.3`	Review	22	2026-07-29
`v6.4.43`	Review	17	2026-07-29
`v7.4.15`	Review	17	2026-07-29
`v8.0.15`	Review	17	2026-07-29
`v8.1.0`	Review	17	2026-07-14
`v6.4.41`	Review	17	2026-07-14
`v5.4.53`	Review	17	2026-07-14
`v8.1.1`	High risk	5	2026-06-27

Block this in CI

PkgRadar gates linhecheng/cmlphp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer linhecheng/[email protected]