PkgRadar

Composer · packagist.org

ntlab/ntjs-repo

Php Assert String Exec: assert() called with a variable — PHP's deprecated string-exec backdoor.

Why PkgRadar flagged v4.17.1

SeveritySignalEvidence
highPhp Assert String Execassert() called with a variable — PHP's deprecated string-exec backdoor. · tohenk-php-ntjs-repo-a2b74a0/src/Script/JQuery/AjaxData.php
highPhp Assert String Execassert() called with a variable — PHP's deprecated string-exec backdoor. · tohenk-php-ntjs-repo-a2b74a0/src/Script/JQuery/DeleteConfirm.php
highPhp Assert String Execassert() called with a variable — PHP's deprecated string-exec backdoor. · tohenk-php-ntjs-repo-a2b74a0/src/Script/JQuery/FileUpload.php
highPhp Assert String Execassert() called with a variable — PHP's deprecated string-exec backdoor. · tohenk-php-ntjs-repo-a2b74a0/src/Script/JQuery/ImageOp.php
highPhp Assert String Execassert() called with a variable — PHP's deprecated string-exec backdoor. · tohenk-php-ntjs-repo-a2b74a0/src/Script/JQuery/ImageOpSave.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v4.17.1High risk252026-06-03

Block this in CI

PkgRadar gates ntlab/ntjs-repo (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer ntlab/[email protected]