James McGrath (@jamesmcgrath.bsky.social)

Composer 2.9 has a small but important change that I think deserves more attention. It now automatically blocks updates to packages with known security advisories. Worth a read if you haven’t looked at the release notes yet. #Drupal #PHP #Composer #Security #OpenSource

loading . . .

Composer 2.9 Release We are pleased to announce the release of Composer 2.9.0, bringing improvements to security, repository management from the CLI, and lots more. Automatic Security Blocking Composer now automaticall... https://blog.packagist.com/composer-2-9/

about 2 months ago