1 year ago

https://dev.to/ashallendesign #introduction Introduction A key piece of building modern-day web applications with PHP involves using packages and libraries built by other developers around the world.

So in this https://ashallendesign.co.uk/blog?category=quickfire article, we're going to discuss how you can use Roave Security Advisories to prevent you from installing Composer dependencies with known security vulnerabilities into your PHP projects.

Security Advisories is a Composer package by https://roave.com that stops you from being able to install other Composer dependencies that have known vulnerabilities.

Now, whenever you run composer require or composer update, if any of the packages that are being installed or updated have known vulnerabilities, Security Advisories will prevent the install and force Composer to throw an error.