Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.#3301876: Implement “list security advisories” Packagist/Composer API includes what versions an advisory affects. So we need that data.
The field should be:
- A single-line text field
- Not required initially, we should have this for new SAs, but might not want to require it for editing existing SAs
- Description: “Writing Composer version constraints.”
- On both the form and display, between the Vulnerability & CVE IDs fields
- Validated with
_drupalorg_validate_version_constraint()
Issue fork drupalorg-3301882
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
changes
Comments
Comment #2
drummComment #6
drummLooks good, merged with a few trivial things I didn't think about when describing the new field.