By cmlara on
Change record status: 
Published (View all published change records)
Project: 
Drupal core
Introduced in branch: 
10.3.x
Introduced in version: 
10.3.0
Issue links: 
https://www.drupal.org/node/3112393
Description: 

The Drupal's Vendor Hardening Composer plugin has been updated to allow individual files to be removed. Previously, the plugin would only remove directories.

An example of removing the install.php file provided by drupal/core:

"extra": {
  "drupal-core-vendor-hardening": {
    "drupal/core": ["install.php"]
  }
}
Impacts: 
Site builders, administrators, editors