⚠️ This package seems to have moderate severity install script vulnerabilities

Affected script: "install-scripts:post-install-cmd"

This script installs a package using Phive -- "force-accept-unsigned" flag means it will accept and install packages without requiring GPG signatures. Any malicious software lacking a valid signature could be installed undetected, potentially leading to data breaches, system damage, and other security risks.

Generated on May 3, 2024 via composer

Repo

Composer

Home

captainhook/captainhook 5.18.0

PHP git hook manager

git

hooks

pre-commit

Package summary

issues

license

Package created

26 Nov 2018

Version published

10 Oct 2023

Maintainers

Total deps

Direct deps

License

MIT

Issues

2 high severity issues

high

captainhook/captainhook@5.18.0

Package uses post-install-cmd script: "tools/phive install --force-accept-unsigned"

via: captainhook/captainhook@5.18.0

sebastianfeldmann/cli@3.4.1

Package uses post-install-cmd script: "tools/phive install"

via: sebastianfeldmann/cli@3.4.1 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

15 Packages, Including:

captainhook/captainhook@5.18.0

psr/container@2.0.2

sebastianfeldmann/camino@0.9.5

sebastianfeldmann/cli@3.4.1

sebastianfeldmann/git@3.11.0

symfony/console@v6.4.7

symfony/deprecation-contracts@v3.5.0

symfony/filesystem@v6.4.7

symfony/polyfill-ctype@v1.29.0

symfony/polyfill-intl-grapheme@v1.29.0

symfony/polyfill-intl-normalizer@v1.29.0

symfony/polyfill-mbstring@v1.29.0

symfony/process@v6.4.7

symfony/service-contracts@v3.5.0

symfony/string@v7.0.7

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of captainhook/captainhook 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
sebastianfeldmann/camino	0.9.5	8.87 kB	MIT	prod
sebastianfeldmann/cli	3.4.1	20.56 kB	MIT	prod	1
sebastianfeldmann/git	3.11.0	61.72 kB	MIT	prod	1
symfony/console	v6.4.7	-	MIT	prod
symfony/filesystem	v6.4.7	-	MIT	prod
symfony/process	v6.4.7	-	MIT	prod dev