Skip to content

[RFC]: Implement composer audit in composer.json #525

@arhimede

Description

@arhimede

RFC

Q A
Proposed Version(s) x.y.0
BC Break? Yes

Goal

We should enforce in composer.json file the Audit

Background

Since composer 2.10
was introduce 3 new configuration keys
We should think if we want to enfoce those in composer.json

{
    "config": {
        "policy": {
            "malware": {
                "block": true,
                "audit": "fail"
            },
            "advisories": {
                "block": true,
                "audit": "fail"
            },
            "abandoned": {
                "block": false,
                "audit": "report"
            }
        }
    }
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions