The current version of drupal/core-dev requires phpunit/phpunit: ^9.6.13 which itself requires sebastian/resource-operations: ^3.0.3 which has been marked as abandoned/archived in GitHub as of March 13 2024.
drupal/recommended-project composer projectcomposer require --dev drupal/core-dev
composer audit and see the failure due to the abandoned package.This affects current code for Drupal 10.2, 10.3 and 11.x.
Likely this would be solved by updating to PHPUnit 10. According to https://github.com/sebastianbergmann/phpunit/issues/4828, PHPUnit 9 is no longer receiving any updates or releases so it is also considered abandoned.
This also can be avoided by using composer audit --no-dev
Closed: duplicate
11.0 🔥
Yeah apparently searching for things with a dash in the middle caused no results to show up.
I think this can be marked as closed since the original maintainer of that package has added the desired abandoned: false to the package, created a new release, and then re-archived the repository.