Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reminder: If Composer Audit gets native opt-out feature ours becomes obsolate (?) #7

Closed
mxr576 opened this issue May 10, 2023 · 2 comments
Closed

Reminder: If Composer Audit gets native opt-out feature ours becomes obsolate (?) #7

mxr576 opened this issue May 10, 2023 · 2 comments

Comments

@mxr576
Copy link
Owner

mxr576 commented May 10, 2023

If the ignore rule is going to be implemented based on CVE then we should add the installed version number to the CVE... in a new major version?

composer/composer#11298
@mxr576
Copy link
Owner Author

mxr576 commented Sep 1, 2023

Audit Ignore was reworked before 2.6.0 release, maybe we should just drop our solution because with built-in ignore feature developers can do much more - unfortunately, because we only wanted to allow ignoring unsupported packages in a (designed to be) painful way.

composer/composer#11605
https://getcomposer.org/doc/06-config.md#ignore

@mxr576
Copy link
Owner Author

mxr576 commented Sep 3, 2023

Closed via ac9a234

@mxr576 mxr576 closed this as completed Sep 3, 2023
This was referenced Mar 20, 2024
Closed
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@mxr576