| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-10-24 | 1.3 kB | |
| v2.5.0.8 -- Installs with Composer 2.9+ security blocking on source code.tar.gz | 2026-10-24 | 410.5 kB | |
| v2.5.0.8 -- Installs with Composer 2.9+ security blocking on source code.zip | 2026-10-24 | 670.1 kB | |
| Totals: 3 Items | 1.1 MB | 0 | |
Updated:
- Composer 2.9 and later refused to install the 2.5 line:
se7enxweb/symfonyreplaces thesymfony/*packages, so every advisory filed against Symfony 3.4 applied to it. The project now requiresse7enxweb/symfony ^3.4.58, which backports those security fixes, and lists the 43 advisory ids that this covers, each with its reason, inconfig.policy.advisories.ignore-id(Composer 2.10) andconfig.audit.ignore(Composer 2.9). 40 are fixed by the backport, 3 concern Mime and Mailer components 3.4 does not have. - Security blocking stays on for every other package and for any new advisory. Never set
COMPOSER_NO_SECURITY_BLOCKING. - doc/INSTALL.md explains the policy; the README and the book give
~2.5.0.8as the constraint.
Verified with fresh installs from Packagist on PHP 8.0 and PHP 8.5 with plain Composer 2.10: no advisory messages, se7enxweb/symfony v3.4.58 locked, 15/15 pages and sign-ins, rich text publish with a link, image upload with variations, no CRITICAL log entries.