Nils Adermann
Nils Adermann
This composer plugin uses direct URLs to patch files. As such it doesn't respect the mechanisms Composer has in place for packages that allow you to replace packages by listing...
For a while now we have had security advisories available through an API on packagist.org: https://packagist.org/apidoc#list-security-advisories. Packagist.org also lists advisories on packages and marks vulnerable versions with a warning sign....
- remove todos - clean up relationship of install/update to LockTransaction, LocalRepoTransaction & Transaction classes > local repo can be type hinted InstalledRepositoryInterface btw now I enforced this in RepoManager...
Pretty rough, helps as-is, but before we actually ship this to anyone needs to be cleaned up a lot. The idea is that this first moves all data into composer.json...
Specifically the test case in https://github.com/composer/composer/pull/8690/files#diff-f7eb2d91175f91f5dc464d891c6f2806R47 needs to get more understandable error output. ``` Problem 1 - Root composer.json requires b/b *@dev -> satisfiable by b/b[dev-master]. - a/a dev-master requires...
I think we should include the functionality of https://semver.mwl.be directly in Packagist. I'd imagine a little input box and stability drop down on the right side on a package detail...
| Q | A | | --- | --- | | Bug? | yes | | New Feature? | no | | Version | | #### Actual Behavior The cache...
Für neue Nutzer kann die Liste der möglichen Verstöße erstmal sehr unübersichtlich sein und man ist sich leicht mal nicht sicher ob man nun die richtige Option gewählt hat. Zum...