Show a security notification on the updates page for modules not covered by the security policy

Created on 23 November 2023, over 1 year ago

Problem/Motivation

Currently, as long as the installed module is the latest version, it shows as green in the update report. I believe that if a module is not covered by the Drupal security advisory policy, that information belongs on this report.

Steps to reproduce

Steps:
1. Install the latest version of the Masquerade module on a development site https://www.drupal.org/project/masquerade
2. Go to /admin/reports/updates
3. Filter by masquerade

Expected result: the Masquerade module is marked as "up to date — not covered by Drupal security advisory policy" and is shaded red.
Actual result: the Masquerade module is marked as "up to date" with no mention that it is not covered by Drupal security advisory policy and is shaded green.

Proposed resolution

Explicitly call out that unsupported modules are not covered by the triple security advisory policy in this report. This will benefit people who take over maintenance of a website.

Remaining tasks

User interface changes

Explicitly call out that unsupported modules are not covered by the triple security advisory policy in this report.

API changes

Data model changes

Release notes snippet

Feature request
Status

Active

Version

11.0 🔥

Component
Update 

Last updated 4 days ago

  • Maintained by
  • 🇺🇸United States @tedbow
  • 🇺🇸United States @dww
Created by

🇺🇸United States charles belov San Francisco, CA, US

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024