MDL-87950: Allow installation of 'insecure' packages

andrewnicols · andrewnicols · commit 3bd18448adcf · 2026-03-06T08:41:05.000+08:00
We have to do  this for now until we make Composer our authoritative
source and allow it to perform version bumps.
diff --git a/runner/main/modules/moodle-composer/composer.json b/runner/main/modules/moodle-composer/composer.json
@@ -17,6 +17,9 @@
         "allow-plugins": {
             "moodle/composer-installer": true,
             "moodle/moodle-composer-scaffold": true
+        },
+        "audit": {
+            "block-insecure": false
         }
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -17,6 +17,9 @@`
`17`	`17`	`"allow-plugins": {`
`18`	`18`	`"moodle/composer-installer": true,`
`19`	`19`	`"moodle/moodle-composer-scaffold": true`
	`20`	`+ },`
	`21`	`+ "audit": {`
	`22`	`+ "block-insecure": false`
`20`	`23`	`}`
`21`	`24`	`}`
`22`	`25`	`}`