Roave/SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily observed · 2026-08-28
Health v2 · maintenance only
77/100
- Activity 99
- Release rhythm 35
- Longevity 100
Flags: no_releases
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 4319
- days_rel: n/a
- days_push: 7
- n_releases_24m: 0
Adoption not part of the score
2914 stars · 112 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A Composer package that acts as an exclusion list of known security vulnerabilities, preventing installation of dependency versions with documented security issues. It is updated frequently and requires no API—simply add it to require-dev to block vulnerable packages.
Use cases
- prevent installing composer packages with known vulnerabilities
- block vulnerable dependency versions in php projects
- supply chain security for composer dependencies
- check if composer update would pull insecure packages
- enforce security advisories in php dependency management
When to choose
- you use Composer and want automatic blocking of known-vulnerable package versions
- you want a zero-config, dependency-free security guard during require/update
When to avoid
- you need runtime vulnerability scanning or auditing of an existing composer.lock (use composer audit or similar tools)
- your project does not use PHP/Composer
Facets
library · maturity active
security dependency-audit package-manager security developer-tools php cli composer security-advisories supply-chain-security vulnerability-blocking php
1 source
- readme: https://github.com/Roave/SecurityAdvisories · fetched 2026-08-28 · 15aa92aaa432
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| Roave/SecurityAdvisories | main | 77 |
For agents
markdown · JSON · MCP: product_card(name="Roave/SecurityAdvisories")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem