PkgRadar

Composer · packagist.org

sofyphp/framework

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.4.13

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · sofyphp-framework-c22c42c/config/marketplace.php
mediumRemote Payloadmatched "curl " · sofyphp-framework-c22c42c/src/Console/Commands/FullInstallCommand.php

Scanned versions

VersionVerdictScoreScanned (UTC)
0.4.13Review292026-06-02
0.4.7Review172026-06-02
0.4.8Review292026-06-02
0.4.9Review292026-06-02
0.4.4Review172026-06-02
0.4.5Review172026-06-02
0.4.6Review172026-06-02
0.4.3Review172026-06-01
0.2.0Review172026-06-01
0.2.1Review172026-06-01
0.1.4Review172026-06-01

Block this in CI

PkgRadar gates sofyphp/framework (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer sofyphp/[email protected]
Start free — 25 scans / moView full evidence