Roave/SecurityAdvisories
View on GitHub ↗ ★ 2,929
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
4 mentions on Hacker News by 4 people: 1 story, 3 comments · first 2017-03-09 · latest 2026-05-27
20082026
-
…which results in this amazing approach of having a meta-package conflict with insecure packages: https://github.com/Roave/SecurityAdvisories . Can’t happen in Node, sadly because of language differences.
comment by captn3m0 · 2026-05-27 · in An Update on Composer and Packagist Supply Chain Security -
▲ 4
Open source is not a place for politicsstory by esistgut · 2022-03-18 · 1 comment
-
…developers to report vulns directly. [1]: https://github.com/sensiolabs/security-checker [2]: https://github.com/Roave/SecurityAdvisories
comment by simonhamp · 2018-07-30 · in Show HN: Ensemble – Keep your PHP apps safe from compromised Composer packages -
…if anyone reading is looking for something like this for PHP, there is Roave Security Advisories — https://github.com/Roave/SecurityAdvisories Add it to your composer.json and it will simply conflict with all lib versions with known…
comment by EvanDotPro · 2017-03-09 · in The Frequency of Known Vulnerabilities in JavaScript