- Issue created by @DamienMcKenna
- 🇺🇸United States DamienMcKenna NH, USA
FYI this can be handled on a per-project basis by modifying the composer.json file:
https://getcomposer.org/doc/06-config.md#abandoned
"config": { "audit": { "abandoned": "report" } }
or
"config": { "audit": { "abandoned": "ignore" } }
- 🇺🇸United States DamienMcKenna NH, USA
This can probably be closed as-is, if nothing else it'll be documentation for the next person who searches for this.
- 🇺🇸United States dave reid Nebraska USA
https://github.com/sebastianbergmann/phpunit/issues/4828 was updated with a new release adding
abandoned: false
to prevent this error on composer audit going forward. I think this can be closed as fixed now. - 🇺🇸United States dave reid Nebraska USA
Also if you are not pushing your site's dev dependencies to your hosting/production code, you can also use
composer audit --no-dev
. But according to the maintainer, it is actually abandoned in all respects, except for that attribute, correct?
- 🇺🇸United States dave reid Nebraska USA
The library is not getting any more updates, no, and PHPUnit 9 is also not getting any more bug fixes either. Ideally updating to PHPUnit 10 or 11 removes the dependency on the abandoned package.