Composer Json Validator

• Analyzed: May 1, 2026, 12:11 AM
• Findings: 1
• Version: 1.0.1
• Hash: 63561452a47432209ac8a857cc3da551395960954f13aa62495c8e97107f738c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a legitimate utility for linting and validating PHP Composer configuration files. The main script, scripts/composer_json_validator.py, performs static analysis on JSON structure, dependency constraints, and PSR-4 autoloading rules without making network calls or executing external payloads. It even includes security-focused checks to warn users about potential risks like arbitrary URL execution (curl/wget) within the composer.json scripts section.