Dependency on RenderArrayTool

From the looks of it, it does not even have to be enabled...
It is listed as a dependency in composer, but not in the module .info file. It only downloads it.

So, I am curious what it is and why it is needed (or not).

Maybe it should be a require-dev dependency?

This is a bit of a blocker for some sites to use Inline Entity Form, including one I'm building (and would really like to use Inline Entity Form on...)

thanks,
-mike

IEF 2.x and 1.x are also only release candidates and never were covered by the security policy, that only applies to stable releases.

A valid question but it makes no difference for now.

I had the same question about RenderArrayTools (RAT) at the first second.
It is used ( a bit like a PHP library package General projects ) for Safely restrict access
It is a library not a module for sure.

Provides a RenderArray class that helps create and alter render arrays.

🐛 Field permissions access override Fixed

We are used to host our general PHP Classes on packagist.org
But for sure we could host general PHP Classes on packages.drupal.org ( could be safer. Maybe stable ones could be covered by the security policy, and the security team )

I support this use case.

Thanks a lot for working and refactoring the IEF module.

I just wish I knew why it shows up in /vendor/drupal as a Nested Root.

I tried installing RAT but it's missing some files?
Logged at https://www.drupal.org/project/rat/issues/3381419 →