I have violinist.io enabled on my repos. Taking the afternoon off and will return to an updated Drupal site in the morning. Not even the slightest worried. #drupal #php #composer
eiriksm retweeted
Packagist turns 15 years old and has served more than 200 billion package installs 🎉
A look back at how Composer and Packagist started, 15 years of milestones, 2026 AI growth and what comes next.
blog.packagist.com/15-years-…
#php #phpc #composerphp
Woah this team is really shipping stuff these days 😎🚀
The Composer CLI is part of your supply chain. Older versions miss the protections in 2.10 and carry known CVEs of their own.
Private Packagist customers can now enforce which Composer client versions can talk to their repository.
#php #phpc #composerphp
eiriksm retweeted
⛔ Composer policies block flagged malware, but only on 2.10. A CI image running an old Composer version, or a project disabling the policy, still installs flagged versions.
Private Packagist now blocks these at the registry, on any client.
#php #phpc #composerphp
eiriksm retweeted
Composer 2.10 is out.
Native malware filtering via @AikidoSecurity, enabled by default on @Packagist. Plus a unified config.policy framework, deprecated source fallback, and wildcards in --with.
#php #phpc #composerphp
It's that feeling that makes me remember why I love open source. Someone took the library I made to "beep out" communication from the Casio mod "sensor watch" and made a totp browser extension youtube.com/shorts/Nnia2b510…
And an input paste extension too!
So cool ❤️
You can have 1 attempt at guessing what time the #Drupal security advisory was published. Don't know what people are sweating about with these, I make the @violinist_io bot sweat for me instead 🤓✌️
Not really breaking much sweat with a #drupal core update. PR set to auto merge 20 minutes before the advisory came out 😎 @violinist_io saves so much time, also when time matters #PHP
Currently in a docker container in a ec2 instance in a session manager session from my home computer on a tailscale ssh connection from my phone in a sleeping bag in a hammock hanging from trees in Bymarka #hardToKeepTrack
Wonder how many of the proposals for @DrupalConEur will fall into one of these categories:
A) About AI / LLM
B) Abstract generated by chat gpt
C) About AI / LLM and the abstract is generated by chat gpt
Happy reading and good luck to the committee 🤓🤞
Slides for the session with the following elaborate title is up now: "Pushing Drupal development limits with 22 million products, 1 million product updates per day and 3 sites on a shared codebase" #DrupalConPrague docs.google.com/presentation…
Curious about what it means to maintain and develop a @drupalcommerce site with 10s of millions of entities? Come see lessons learned, nerdy numbers and more from our experience at @NyMediaAS . Tomorrow at 1030 @DrupalConEur events.drupal.org/prague2022… #DrupalConPrague #drupal
I like error messages as much as the next person, but today I really want to show my appreciation for this error message from the patch(1) command:
patch: **** Only garbage was found in the patch input.
I mean. It's not trying to be diplomatic is it? Only, exclusively garbage!
Created a blog post again basically describing how to fail your tests when an update has an unexpected database update #drupal #PHP eiriksm.dev/site-schema
Consistently getting automated #drupal core security updates from @violinist_io before the SA is published. This was also the case this Wednesday! Here is an older analysis from the Violinist blog: medium.com/@violinistdevio/r…
Slides for my talk "The unique challenges of launching B2B stores on @drupalcommerce" can be found here #drupal #drupalconeur. Thanks for having me! docs.google.com/presentation…













