Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
What risk would I run updating very old D7 sites to their most up to date D7 core and contrib code and module versions?
A little background,
Starting in 2011, I was a senior developer on a team that, over the course of 6 years, created and managed 20 or so enterprise-level D7 sites. Some of these were national level chains, some of them were major universities. Given that they had already invested so much in D7, less than a handful decided to go D8+. The rest decided to ride the D7 wave until EOL.
the subject release is missing several .PHP files in the Vendor\Composer folder. the Vendor\Autoload.PHP calls one of them (Vendor\autoload_real.PHP) and they aren't there. I don't know any other method of notifying the community of this issue.