This project is responsible for generating a PHP Security Advisories Database as a JSON file.

This package can only be required in its dev-master version: there will never be stable/tagged versions because of the nature of the problem being targeted. Security issues are in fact a moving target, and locking your project to a specific tagged version of the package would not make any sense.

This package is therefore only suited for installation in the root of your deployable project.

This package extracts information about existing security issues in various composer projects from the FriendsOfPHP/security-advisories repository and the Github security advisories db.

NOTE: Travis cron is configured to run once a day, to check if PHP Security Advisories Database was updated.

NOTE: The sha in security-advisories-sha file is always the last commit sha of a count of merged security vulnerabilities and git rev-parse --verify HEAD of PHP Security Advisories Database and Github security advisories db.