PkgRadar

Composer · packagist.org

open-runtimes/executor

Remote Payload: matched "curl "

Why PkgRadar flagged 0.25.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · open-runtimes-executor-fee06ee/src/Executor/Runner/Docker.php

Scanned versions

VersionVerdictScoreScanned (UTC)
0.25.1Review62026-06-19

Block this in CI

PkgRadar gates open-runtimes/executor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer open-runtimes/[email protected]