drupal-composer / drupal-security-advisories
Installs: 2 223 847
Dependents: 6
Suggesters: 0
Security: 0
Stars: 51
Watchers: 7
Forks: 19
Open Issues: 12
Type:metapackage
Conflicts
- drupal/acquia_connector: <1.16
- drupal/acquia_contenthub: <1.0,<1.4
- drupal/addtoany: <1.11
- drupal/admin_toolbar: <2.5
- drupal/alinks: <1.1
- drupal/apigee_edge: <1.2,<1.12
- drupal/auto_login_url: <1.2
- drupal/bat: <1.2
- drupal/bootstrap: <3.5,<3.14
- drupal/ckeditor_uploadimage: <1.5
- drupal/cleantalk: <2.7
- drupal/commerce: <2.9,<2.18,<2.27
- drupal/config_perms: <1.1,<1.2
- drupal/config_update: <1.5
- drupal/core: <8.0.0-beta2,<8.0.4,<8.1.3,<8.1.7,<8.1.10,<8.2.3,<8.2.7,<8.2.8,<8.3.1,<8.3.4,<8.3.7,<8.3.8,<8.3.9,<8.4.5,<8.4.6,<8.4.7,<8.4.8,<8.5.0-rc1,<8.5.1,<8.5.2,<8.5.3,<8.5.6,<8.5.8,<8.5.9,<8.5.11,<8.5.14,<8.5.15,<8.6.2,<8.6.6,<8.6.10,<8.6.13,<8.6.15,<8.6.16,<8.7.0-rc1,<8.7.1,<8.7.5,<8.7.11,<8.7.12,<8.7.14,<8.8.1,<8.8.4,<8.8.6,<8.8.8,<8.8.10,<8.8.11,<8.8.12,<8.9.1,<8.9.6,<8.9.9,<8.9.10,<8.9.13,<8.9.14,<8.9.16,<8.9.17,<8.9.18,<8.9.19,<8.9.20
- drupal/create_user_permission: <1.2
- drupal/cshs: <1.0-beta2,<3.5
- drupal/ctools: <3.6,<3.7
- drupal/decoupled_router: <1.2
- drupal/die_in_twig: <2.0
- drupal/domain_group: <1.04
- drupal/drd: <3.2,<3.14
- drupal/drd_agent: <3.1,<3.7
- drupal/drupal: <8.0.0-beta2,<8.0.4,<8.1.3,<8.1.7,<8.1.10,<8.2.3,<8.2.7,<8.2.8,<8.3.1,<8.3.4,<8.3.7,<8.3.8,<8.3.9,<8.4.5,<8.4.6,<8.4.7,<8.4.8,<8.5.0-rc1,<8.5.1,<8.5.2,<8.5.3,<8.5.6,<8.5.8,<8.5.9,<8.5.11,<8.5.14,<8.5.15,<8.6.2,<8.6.6,<8.6.10,<8.6.13,<8.6.15,<8.6.16,<8.7.0-rc1,<8.7.1,<8.7.5,<8.7.11,<8.7.12,<8.7.14,<8.8.1,<8.8.4,<8.8.6,<8.8.8,<8.8.10,<8.8.11,<8.8.12,<8.9.1,<8.9.6,<8.9.9,<8.9.10,<8.9.13,<8.9.14,<8.9.16,<8.9.17,<8.9.18,<8.9.19,<8.9.20
- drupal/ds: <2.7,<3.0
- drupal/dynamic_entity_reference: <1.0-beta2
- drupal/easy_breadcrumb: <1.13
- drupal/echo: <1.7
- drupal/editor_file: <1.2
- drupal/elf: <1.2
- drupal/entity_delete: <1.4
- drupal/entity_embed: <1.2
- drupal/entity_ref_tab_formatter: <1.3
- drupal/eu_cookie_compliance: <1.1,<1.3
- drupal/examples: <1.1
- drupal/exif: <1.1
- drupal/existing_values_autocomplete_widget: <1.2
- drupal/expand_collapse_formatter: <1.1
- drupal/fac: <1.8
- drupal/facets: <1.3,<1.8
- drupal/fontawesome: <2.12
- drupal/form_mode_manager: <1.4
- drupal/forms_steps: <1.2
- drupal/fraction: <1.2
- drupal/google_analytics: <2.1
- drupal/google_index_api: <1.3
- drupal/graphql: <4.1,<4.2
- drupal/group: <1.1,<1.2
- drupal/gutenberg: <1.7,<1.8,<1.12,<2.0
- drupal/hotjar: <1.0
- drupal/htmlmail: <3.0-alpha2
- drupal/imagecache_external: <1.1
- drupal/img_annotator: <1.2
- drupal/instagram_block: <2.0-alpha2
- drupal/jquery_ui_datepicker: <1.2
- drupal/jsonapi: <1.9,<1.10,<1.14,<1.16,<1.24,<1.25,<2.0-rc4,<2.3
- drupal/ldap: <3.0-alpha1,<3.0-beta2
- drupal/like_dislike: <1.1
- drupal/linkit: <4.3,<4.4,<5.0-beta13
- drupal/loft_data_grids: <1.4
- drupal/login_alert: <1.3
- drupal/mail_login: <2.5
- drupal/mapbox_ui: <1.2
- drupal/menu_export: <1.2
- drupal/menu_item_extras: <2.5
- drupal/metatag: <1.8,<1.9
- drupal/miniorange_saml: <2.14,<2.24
- drupal/modal_form: <1.2
- drupal/modal_page: <2.5
- drupal/multiple_registration: <2.8
- drupal/node_view_permissions: <1.1
- drupal/nodeaccess: <1.0-beta3
- drupal/nodejs: <1.0
- drupal/oauth: <2.1
- drupal/oauth_server_sso: <1.1
- drupal/open_readspeaker: <1.5
- drupal/openid_connect: <1.1
- drupal/openid_connect_windows_aad: <1.4
- drupal/opigno_forum: <1.2
- drupal/opigno_group_manager: <1.8
- drupal/opigno_learning_path: <1.4,<1.11
- drupal/pages_restriction: <1.4
- drupal/panels: <3.0-beta5
- drupal/panopoly: <2.0-alpha7
- drupal/paragraphs: <1.5,<1.6
- drupal/permissions_by_term: <1.09,<1.11,<1.35,<2.0,<2.11
- drupal/phpconfig: <1.1
- drupal/piwik: <1.1
- drupal/preview_link: <1.1
- drupal/prlp: <1.3,<1.5
- drupal/profile: <1.1
- drupal/protected_pages: <1.1
- drupal/readonlymode: <1.0
- drupal/recaptcha_v3: <1.2
- drupal/require_login: <1.8
- drupal/salesforce: <3.1
- drupal/saml_sp: <3.7
- drupal/samlauth: <3.1
- drupal/search_api: <1.0-alpha14
- drupal/search_api_attachments: <1.0-beta18
- drupal/session_limit: <1.0-beta3
- drupal/simple_amp: <1.16
- drupal/simple_oauth: <4.6
- drupal/smart_trim: <1.2
- drupal/smtp: <1.0-beta3
- drupal/social: <6.5,<7.1,<8.10,<9.8,<9.17
- drupal/spamspan: <1.1
- drupal/stacks: <1.1
- drupal/super_login: <1.3,<1.7
- drupal/svg_formatter: <1.06,<1.12
- drupal/svg_image: <1.10
- drupal/swiftmailer: <1.0-beta1
- drupal/tablefield: <2.1
- drupal/taxonomy_access_fix: <2.7
- drupal/tb_megamenu: <1.4
- drupal/tft: <1.0-beta2
- drupal/tmgmt: <1.7
- drupal/video: <1.4
- drupal/views_bulk_operations: <2.6,<3.4
- drupal/webform: <5.11,<5.12,<5.25,<5.28,<5.30,<5.31
- drupal/workbench_moderation: <1.4
- drupal/xmlsitemap: <1.0-alpha2
This package is auto-updated.
Last update: 2024-12-11 18:44:26 UTC
README
This package ensures that your application doesn't have installed dependencies with known security vulnerabilities. Inspired by Roave Security Advisories.
Deprecated
The project has been discontinued. The functions have been replaced by ‘composer audit’. Read the related drupal.org issue for more information.
Installation
Drupal 9+ (composer.json)
~$ composer require drupal-composer/drupal-security-advisories:9.x-dev
Drupal 7 (composer.json)
~$ composer require drupal-composer/drupal-security-advisories:7.x-dev
Usage
This package does not provide any API or usable classes: its only purpose is to prevent installation of software with known and documented security issues.
Stability
This package can only be required in its dev-* version: there will never be stable/tagged versions because of the nature of the problem being targeted. Security issues are in fact a moving target, and locking your project to a specific tagged version of the package would not make any sense.
This package is therefore only suited for installation in the root of your deployable project.
Handling Failures
In the rare event that a security release does not affect your project, and upgrading to latest release is undesireable, you can suppress a build failure by specifying a particular SHA project in composer.json. For example, assume that drupal/dynamic_entity_reference 8.1.0-beta2 just came out as a Security release. In order to keep using 8.1.0-beta1, you can specify the following in composer.json:
"require": {
"drupal/dynamic_entity_reference": "dev-8.x-1.x#8713890"
},
Note: that this approach opts your package out of any future security releases. You can check for future security releases with drush pm:security
(drush9) or drush pm-updatestatus
(drush8).
Sources
This packages gets information form Drupal.org APIs.
Build command: ./build/build.sh