- 🇺🇸United States drumm NY, US
✨ Implement “list security advisories” Packagist/Composer API Fixed now announces security advisories, including unsupported projects due to unresolved security issues.
When a project gets unsupported for security reasons(e.g. SA-CONTRIB-2019-006 → ), there is no way to know until visit drupal.org project page or follow security releases.
let's inform the composer so that people won't download or continue using it.
1. Discuss,
2. Implementation.
3. Test
4. Release
5. Co-ordinate with the security team to update it as part of SA release?
TBC
Closed: duplicate
1.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
✨ Implement “list security advisories” Packagist/Composer API Fixed now announces security advisories, including unsupported projects due to unresolved security issues.