8000 getting a fork of symfony installed · Issue #390 · composer/packagist · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

getting a fork of symfony installed #390

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
phiamo opened this issue Feb 17, 2014 · 3 comments
Closed

getting a fork of symfony installed #390

phiamo opened this issue Feb 17, 2014 · 3 comments

Comments

@phiamo
Copy link
phiamo commented Feb 17, 2014

Hi folks,
i recently did a composer.install on a fresh project, and i get lenybernard/symfony (version 2.4) installed together with symfony/symfony
when tring to find out why:

$ composer.phar depends lenybernard/symfony
There is no installed package depending on "lenybernard/symfony".

but removing the folder vendor/lenybernard and doing a composer.phar install just installs it again ....

any idea why this happens?

my composer.json: https://gist.github.com/phiamo/9052313
@lenybernard
Copy link

Hi Phiamo,

This is indeed very weird, we discussed about this problem on twitter this afternoon and @Seldaek said to me :

@lenybernard it's not really a bug more of a mis-use, you shouldn't put forks on packagist if they're only for your use.

— Jordi Boggiano (@Seldaek) 17/02/2014
<script async src="//platform.twitter.com/widgets.js" charset="utf-8"></script>

Actually, I think it's a big and very dangerous issue and some malicious guy could use this in an evil purpose.

@phiamo
Copy link
Author
phiamo commented Feb 17, 2014

@Seldaek @lenybernard thats what i thought in the first moment ....

@Seldaek
Copy link
Member
Seldaek commented Feb 18, 2014

See http://blog.naderman.de/2014/02/17/replace-conflict-forks-explained/ for details and composer/composer#2690 for planned improvements.

@Seldaek Seldaek closed this as completed Feb 18, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Seldaek @phiamo @lenybernard
0