mirror of
https://github.com/yiisoft/yii.git
synced 2026-03-09 09:36:56 +01:00
Acceptable risk in PHPUnit (https://github.com/advisories/GHSA-vvj3-c3rp-c85p) Turning the feature off entirely for github builds seems acceptable. Any new issues found in composer.json are already reported by the github security reporting feature.