CVE-2022-24828: #Composer Command Injection Vulnerability
▻https://blog.packagist.com/cve-2022-24828-composer-command-injection-vulnerability
un composer self-update s’impose :)
-
-
Déploiement avance avec SSH, Git et #Composer | Documentation OVH
▻https://docs.ovh.com/fr/hosting/24-days/day07/#installation-de-composer/me découvre qu’on peut faire du composer sur un mutu #ovh
-
Mais j’ai l’impression qu’OVH n’autorise pas git.spip.net en mutu :(
fatal: unable to access 'https://git.spip.net/spip-contrib-squelettes/html5up_escape_velocity.git/': Failed to connect to git.spip.net port 443: Connection refused -
Oui, ils ont une liste de sites autorisés assez restreinte. Mais, je notais surtout la possibilité d’utiliser composer sur leur mutu ;)
-
-
Critical security vulnerability in PrestaShop modules | PrestaShop Developers’ blog
▻https://build.prestashop.com/news/critical-security-vulnerability-in-prestashop-modulesFaille de sécurité dans Prestashop et plusieurs modules : l’attaque semble venir des composants PHPUnit intégrés
(ou : l’utilisation de lib externes dans un projet open-source n’a pas forcément que des avantages...) -
Abstracting #WordPress Code To Reuse With Other CMSs: Concepts (Part 1) — Smashing Magazine
▻https://www.smashingmagazine.com/2019/11/abstracting-wordpress-code-cms-conceptsMaking our code #CMS as agnostic as possible enables us to easily port our application to another CMS if the need arises. In this article, we will learn how code abstraction works, why it is a good idea, and the key concepts to achieve it.... Create packages, distribute them through #Composer
Tiens tiens...
-
Et donc on y apprend que Gutenberg a été entièrement porté pour Drupal, notamment :
▻https://www.drupal.org/project/gutenberg -
La suite...
In the first part of this series, we learned the key concepts to build an application that is as CMS-agnostic as possible. In this second and final part, we will proceed to abstract a WordPress application, making its code ready to be used with Symfony components, Laravel framework, and October CMS (which is based on Laravel).
▻https://www.smashingmagazine.com/2019/11/abstracting-wordpress-code-reuse-with-other-cms-implementation
-
-
Using Composer With WordPress — Smashing Magazine
▻https://www.smashingmagazine.com/2019/03/composer-wordpressIntégration de Composer dans Wordpress : problèmes techniques et solutions existantes. De nombreuses similitudes avec SPIP mais des solutions déja opérationnelles (entre autre un serveur packagist spécifique)
-
Laragon - portable, isolated, fast & powerful universal development environment for PHP, Node.js, Python, Java, Go, Ruby.
▻https://laragon.orgUn serveur web de développement opensource sous Windows : « light » (18 Mo), configurable (document root apache, datadir MariaDB) et portable. Intègre PHP, MariaDB, XDebug etc... mais aussi NodeJS et Composer, une appli d’envoi de mail et un « mail catcher ». Génère des vhost en .test et (depuis la v3.3) semble intégrer une génération de certificats SSL internes.
– Versions de PHP 5. et 7. + ajout « simple » d’une nouvelle version : ▻https://forum.laragon.org/topic/166/tutorial-how-to-add-another-php-version
– phpmyadmin n’est pas inclut par défaut : ▻https://forum.laragon.org/topic/98/tutorial-how-to-add-phpmyadminDocumentation : ▻https://laragon.org/docs et tutoriaux : ▻https://forum.laragon.org/category/5/tutorials
GitHub : ▻https://github.com/leokhoa/laragon -
SPIPremix
►https://spip.lerebooteux.frLa doc de l’essais de James pour pouvoir intégrer Composer dans le développement de SPIP
Et pour une introduction à Composer : voir ►https://getcomposer.org/doc/00-intro.md...Et tant qu’a rassembler un peu tout ce qui concerne ce projet :
– le fil de discussion sur spip-dev : ▻http://archives.rezo.net/archives/spip-dev.mbox/7CHGDXCWCANP2PW2N25UPBRWBWRLS4ZY
– le script spip_svn_loader :
présentation sur contrib ►https://contrib.spip.net/spip_svn_loader
et son repo git : ►https://github.com/JamesRezo/spip_svn_loader
– spip-cli (qui impose aussi l’usage de Composer) : ►https://contrib.spip.net/SPIP-Cli#SPIP #composer #POC #développement
-
-
#ComposerPHP Release 1.4.0
▻https://github.com/composer/composer/releases/tag/1.4.0
Improved memory usage of dependency solver
—> ▻https://getcomposer.org/doc/articles/autoloader-optimization.md
#php
-
Global installation of #php tools with #composer
▻https://akrabat.com/global-installation-of-php-tools-with-composer
#shell-
composer global require h4cc/phpqatools --dev^^ :-)
-
@james oui bon ça va hein :p
de mon côté j’ai fait ça pour installer ►https://github.com/thephpleague/geotools
curl -sS https://getcomposer.org/installer | sudo php -- --install-dir=/usr/local/bin --filename=composer
composer global require league/geotools
export PATH=~/.composer/vendor/bin:$PATH
-
-
-
#Composer installation without #github.com (nor #packagist) dependency - like a boss !
▻http://tech.m6web.fr/composer-installation-without-github.html
We chose to use #Satis - a great tool provided by the Composer team. The main idea is, regulary download packages and their informations on our local servers.
Très bon tuto (que je découvre seulement maintenant) et que je n’aurai donc pas besoin d’écrire ;)
#PHP
-
Setting Up a Local Mirror for #Composer Packages With #Satis
▻http://code.tutsplus.com/tutorials/setting-up-a-local-mirror-for-composer-packages-with-satis--net-36726#PHP, ouais, toujours ...
-
#composer
►https://getcomposer.org/doc/00-intro.mdComposer is a tool for dependency management in #php. It allows you to declare the dependent libraries your project needs and it will install them in your project for you.
-
Tous les pays du monde en #JSON, #CSV et #XML.
▻https://mledoze.github.io/countries
installable via #composer (#PHP)
avec des données géographique en #svg :
▻https://github.com/mledoze/countries/tree/master/dataEn licence ODL
via @codepo8
exploitée ici par exemple : ▻http://restcountries.eu
-
-
Toran Proxy and the future of #Composer - Jordi Boggiano
▻http://seld.be/notes/toran-proxy-and-the-future-of-composerComposer and #Packagist remain free to use and fully open source. There is no way that will change. I just hope I can continue to work on them, for the community and supported by the community.
Changement de #modèle_économique ...
#PHP
-
#Authentication management in #Composer - Jordi Boggiano
▻http://seld.be/notes/authentication-management-in-composerJusque là, il y avait une solution sous forme de plugin :
-
The rise of #Composer and the fall of #PEAR - Fabien Potencier
▻http://fabien.potencier.org/article/72/the-rise-of-composer-and-the-fall-of-pearit’s probably a good time to remove PEAR support from #PHP itself; and I’m not sure that it would make sense to bundle Composer with PHP.
-
End of Life for PEAR Installation Method · Sebastian Bergmann
▻https://github.com/sebastianbergmann/phpunit/wiki/End-of-Life-for-PEAR-Installation-Method
Today most users prefer to use a #PHP Archive (PHAR) of PHPUnit or #Composer to download and install PHPUnit.
We are taking the next step in retiring the #PEAR installation method with today’s release of #PHPUnit 3.7.35 and PHPUnit 4.0.17. These two releases are the last versions of PHPUnit released as PEAR packages. Installing them using the PEAR Installer will trigger a deprecation message on every execution of the commandline test runner.
