TYPO3 extension advisories about security-advisories HOT 4 CLOSED

And I personally don't like the way roave avoids installing unsecure packages.

Well, it's a zero-dependencies, zero-sources approach, with the downside that it has to act during composer update. For me, that's already a big win, from an engineering PoV.

That said, I don't expect advertising from the upstream repository: this is just a database, and that's OK 👍

from security-advisories.

Thanks for the information. This repository is only about the security vulns DB and I don't want to add any opinionated features.

from security-advisories.

The source (TYPO3 security team) is the same as for the TYPO3 core advisories that you include in this project, so I'm not sure I understand the "opinionated" thing. But thanks anyway for the quick reply.

from security-advisories.

This repository is only about a database of vulnerabilities.

And I personally don't like the way roave avoids installing unsecure packages.

from security-advisories.