Cameron Eagans

@ucola I was referring to the OP. For your case, I can't say for certain, but if the words "Cannot apply patch" appear in the output, it's probably because the...

> 1 out of 3 hunks failed--saving rejects to .htaccess.rej The patch doesn't apply.

Can you supply a complete composer.json that reproduces the problem?

The `drupal/core` package doesn't have .htaccess. You're trying to patch a nonexistent file.

Just change the file and commit it. IMO, you should do that with anything outside the `core/` directory or any other composer-installed packages.

@ucola You shouldn't need to create a new repo for the files. You should commit files that aren't managed by composer to the project repository. Changes to those files should...

Yeah, absolutely. Are you intending to submit a PR for this?

This is in line with what composer has done for enabling plugins. I've thought about this before and I'm not opposed to some kind of limitation or control or something...

> 958 | For additional security you should declare the allow-plugins config with a list of packages names that are allowed to run code. See https://getcomposer.org/allow-plugins Did you try this?...

Can you please post your complete composer.json somewhere? If you don't want it to be public, you can email it to me. [email protected]