Greg Anderson

See #264. I still am of the mind that most people need drupal-core-strict, and most people do not need drupal-core-require-dev most of the time, and would rather see the former...

As for the issue of DX, users must learn one new trick: `composer update drupal/core webflo/drupal-core-strict --with-dependencies`. Put that in the project README. I think the benefits of protecting inexperienced...

Lowest testing would solve issues such as https://www.drupal.org/project/drupal/issues/2965887. I disagree with the premise that highest testing would obviate the need for drupal-core-strict, though. It has happened a number of times...

> I believe those only affected new installations This is not the case. Sites not running drupal-core-strict have been broken by running `composer update` commands that bring in a newer...

It is likely that Drupal 8.8.0 will support Composer-managed Drupal sites with (and without) a relocated document root, and it is also likely that once this is supported, some equivalent...

I think it's a bug that webflo/drupal-core-strict does not have a restriction on drupal/core. Without it, `composer update drupal/core --with-dependencies` has no requirement to update drupal-core-strict, which means that you...

Looks done to me.

I use 'drupal' in [pantheon-systems/example-drupal7-circle-composer](https://github.com/pantheon-systems/example-drupal7-circle-composer), and I have also seen htdocs and code. I'd like to use the same directory name in my project as is used here. It doesn't...

Okay, I will switch to `web` to follow the standard here and in symfony.

~So, it turns out that I have to use `code` when using Drupal 8 on Pantheon. This limitation should not be around forever; once the restriction is lifted, I'll switch...