PkgRadar

Composer · packagist.org

pushword/flat-file

Composer Abandoned Package: Packagist marked this package abandoned — maintainer signaled it should not be used.

Why PkgRadar flagged 1.0.0-rc657

SeveritySignalEvidence
mediumComposer Abandoned PackagePackagist marked this package abandoned — maintainer signaled it should not be used.

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0-rc657Review42026-06-09
1.0.0-rc654Low risk02026-06-09
1.0.0-rc637Low risk02026-06-02
1.0.0-rc636Review42026-06-02
1.0.0-rc625Review42026-06-01

Block this in CI

PkgRadar gates pushword/flat-file (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer pushword/[email protected]
pushword/flat-file — Composer security scan | PkgRadar