| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-10-25 | 1.4 kB | |
| v2.5.0.9 -- Installs with Composer 2.11, security blocking on source code.tar.gz | 2026-10-25 | 412.3 kB | |
| v2.5.0.9 -- Installs with Composer 2.11, security blocking on source code.zip | 2026-10-25 | 671.9 kB | |
| Totals: 3 Items | 1.1 MB | 0 | |
The 2.5 line installs with Composer 2.11 as well as 2.10, with security blocking left on.
Removed:
- The Goutte Mink driver, the only package that pulled in guzzle 6 and guzzlehttp/psr7 1.x (development tooling, not used by the site).
Updated:
- Requires se7enxweb/twig ^2.16.5 (15 Twig 2.x security fixes backported), se7enxweb/flysystem ^1.1.11, se7enxweb/symfony-mime ^5.4.55 and se7enxweb/graphql-php ^0.13.12 (security fixes backported). Composer 2.11 blocks development versions with advisories; the line no longer resolves any of them.
- The advisory policy (config.policy.advisories.ignore-id and config.audit.ignore) lists each advisory that these maintained forks fix, with its reason: 62 ids in total. Blocking stays on for every other package and for any new advisory.
Verified with fresh installs from Packagist as doc/INSTALL.md says, COMPOSER_NO_SECURITY_BLOCKING unset: Composer 2.10.3 and 2.11.0-RC1, each on PHP 8.0 and PHP 8.5. Every run: no advisory messages, composer audit finds no advisories, 15/15 pages and sign-ins, rich text publish with a link, image upload with variations, no CRITICAL log entries.