Problem/Motivation

The vendor folder contains a copy of firebase/php-jwt 6.11.1.
This version has a known vulnerability: https://github.com/advisories/GHSA-2x45-7fc3-mxwq

Steps to reproduce

Proposed resolution

You probably don't need to version the vendor folder in Git: https://getcomposer.org/doc/faqs/should-i-commit-the-dependencies-in-my-...

Remaining tasks

User interface changes

API changes

Data model changes

Issue fork youtube_playlists-3574896

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

prudloff created an issue. See original summary.

nickolaj made their first commit to this issue’s fork.

nickolaj opened merge request !1

nickolaj’s picture

nickolaj
Primary language Ukrainian
commented
Status: Active » Needs review

Removed vendor/ directory and composer.lock from version control, added .gitignore. Dependencies should be installed via `composer install` rather than being committed to the repository.

  • nickolaj committed 25ae4358 on 1.0.x 
    Issue #3574896: Removed vendor/ directory and composer.lock from v...
sudarshan giri’s picture

sudarshan giri commented
Status: Needs review » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.