- πΊπΈUnited States smustgrave
Seems there's nothing to do here. composer is now on 2.4 so think it's good.
I just came across this article:
https://amp.thehackernews.com/thn/2022/03/multiple-security-flaws-discovered-in.html
As it says Composer has chosen to ignore this, and as I find nothing in the way of patches or additional information, and as Composer and NPM are major players in the whole of Drupal, I wanted to see if anyone has any additional information relating to keeping Drupal secure, in light of this article.
Closed: outdated
9.5
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Seems there's nothing to do here. composer is now on 2.4 so think it's good.