magento / magento/composer-dependency-version-audit-plugin
Do you accept PR to with new allowed vendor?
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 5
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Some of our packages ("swissup" vendor) are published on both packagist, marketplace, and our private repos and we'd like to prevent "Higher matching version ..." error for our modules when the marketplace version is not updated yet.
So the question is, will you accept a PR that will add the [swissup](https://packagist.org/users/swissup/) vendor to the [allow list](https://github.com/magento/composer-dependency-version-audit-plugin/blob/main/src/Plugin.php#L47-L56)?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at src/Plugin.php lines 47-56, where the allow list is defined. Confirm how the swissup vendor should be added, then verify that packages from the vendor no longer trigger the reported “Higher matching version” error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- tooling
- Issue type
- Feature
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100