PkgRadar

Composer · packagist.org

oceancodex/wpsp-core

Composer Install Scripts Present: composer.json declares pre/post install/update scripts — execute on composer install.

Why PkgRadar flagged 13.1.1

SeveritySignalEvidence
mediumSuspicious Publish Context{"package_age_days":6,"publisher":"OceanCodex","burst_same_day":2,"burst_week":2,"lure":null,"version_anomaly":true,"new_account":false}

Scanned versions

VersionVerdictScoreScanned (UTC)
13.1.1Review152026-06-13
12.1.1Review52026-06-13
12.1.0Review52026-06-13
13.1.0Review52026-06-13
12.0.9Review52026-06-10
13.0.9Review52026-06-10
13.0.8Review52026-06-09
12.0.8Review52026-06-09
13.0.4Review52026-06-09
12.0.4Review52026-06-09
13.0.3Review52026-06-08
13.0.1Review52026-06-07
12.0.1Review52026-06-07
13.0.0Review52026-05-28
12.0.0Review52026-05-28

Block this in CI

PkgRadar gates oceancodex/wpsp-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer oceancodex/[email protected]