grasmash/drupal-security-warning

Warns users installing Drupal project versions not supported by Security Team.

2.0.0 2026-06-11 13:13 UTC

Requires

• php: >=8.1
• composer-plugin-api: ^2.0

Requires (Dev)

• composer/composer: ^2.9.8
• phpunit/phpunit: ^10.5.62 || ^11.5.50 || ^12.4 || ^13.0
• squizlabs/php_codesniffer: ^3.13 || ^4.0
• symfony/filesystem: ^6.4 || ^7.0 || ^8.0
• symfony/process: ^6.4.33 || ^7.3.11 || ^8.0

GPL-2.0-or-later

• Matthew Grasmick

• security
• drupal

README

This Composer plugin will display a warning when users install or update Drupal packages that are not supported by the Drupal Security team, as per the Security Advisory Policy.

Installing or updating a "non-covered" Drupal package will display:

You are using Drupal packages that are not supported by the Drupal Security Team!
  - drupal/consumers:1.0.0-beta1: Project has not opted into security advisory coverage!
  - drupal/inline_entity_form:1.0.0-beta1: Beta releases are not covered by Drupal security advisories.
  - drupal/scheduled_updates:1.0.0-alpha6: Project has not opted into security advisory coverage!
  - drupal/diff:1.0.0-RC1: RC releases are not covered by Drupal security advisories.
  - drupal/seckit:1.0.0-alpha2: Alpha releases are not covered by Drupal security advisories.
  - drupal/security_review:dev-1.x: Dev releases are not covered by Drupal security advisories.
See https://www.drupal.org/security-advisory-policy for more information.

Requirements

• PHP 8.1+
• Composer 2.x

Installation

composer require grasmash/drupal-security-warning