FriendsOfPHP/security-advisories

Support for Composer 1 is deprecated and some packages will not be available.

kenjis opened this issue · 5 comments

$ composer update
Loading composer repositories with package information
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/

Okay, what is your question?

I don't know why, but this repository depends on Composer 1.

"composer/composer": "~1.0",

All the dependencies haven't been updated for a while probably because the PHP script is only used in the pipeline when verifying committed advisories.

stof commented

Looks like you get this error when running composer, not when running the validator. So make sure your composer update uses Composer 2.

regarding the dev dependency, I'm updating it in #668 but that should be irrelevant to this issue.

Thank you. #668 fixed this issue and #666.