Jordi Boggiano

Not sure in which context you are seeing this, but this parameter should definitely be available when running a request. Did you find a way to resolve this?

Nope it's not only the build, it's also my comments above which were not addressed.

https://github.com/nelmio/NelmioSecurityBundle/releases/tag/v3.2.0 has added support for null cookies - but the issue with signing the session cookie might still be current. I am not sure and I'd have to try it...

I guessI'd mark it as `~` per the README, because `*/` would be more idiomatic. But anyway I don't think this repo is very much maintained so I'll not spend...

> Filesystem file order is indeed non-deterministic. Could be fixed probably by using a sorted iterator. Having deterministic ordering by default would for sure be nice. In Composer we do...

> I disagree. If you have to add those parameters to different APIs, it's better to just provide separate APIs to override that metadata where the doesn't care about how...

Yes composer phar build is slow too due to addFromString but imo that's normal and even stated in the docs: Note: Phar::addFile(), Phar::addFromString() and Phar::offsetSet() save a new phar archive...

In general yes sounds ok to me if the amount of code is not insane, as I don't expect this will need much maintenance/changes. I am not sure either which...

Yeah for sure this should be a new format name, no worries about our own json format changing.

I'd say if the audit.abandoned is set to fail it probably should be in the report, and if not maybe ignore them? Well no I guess warn should also be...