Composer Now Blocks Insecure Packages: Fixing CI Without Switching Security Off
Composer now refuses package versions with known security advisories. What it blocks and when, what each off switch costs, and how to fix CI with a narrow, dated exception instead.
19 min read
