PHPackages                             mxr576/ddqg-composer-audit - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. mxr576/ddqg-composer-audit

ActiveComposer-plugin[Security](/categories/security)

mxr576/ddqg-composer-audit
==========================

Drupal Dependency Quality Gate Composer Audit plugin

1.3.1(1y ago)1056.7k↓20.9%[11 issues](https://github.com/mxr576/ddqg-composer-audit/issues)2MITPHPPHP ~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.4.0CI passing

Since Sep 4Pushed 1y ago1 watchersCompare

[ Source](https://github.com/mxr576/ddqg-composer-audit)[ Packagist](https://packagist.org/packages/mxr576/ddqg-composer-audit)[ RSS](/packages/mxr576-ddqg-composer-audit/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependencies (14)Versions (12)Used By (2)

Drupal Dependency Quality Gate Composer Audit plugin
----------------------------------------------------

[](#drupal-dependency-quality-gate-composer-audit-plugin)

This project extends `composer audit` command with new "advisories" originating from the results generated by the [mxr576/ddqg](https://packagist.org/packages/mxr576/ddqg) project that aims to help run Drupal projects on secure and high-quality Drupal dependencies.

[![Family Guy, Consuela says: No, no, no low-quality dependencies](https://camo.githubusercontent.com/48b0ba3611e183eb309e75d41a7748a90c4be87b34c1522515d2ede75eae29eb/68747470733a2f2f692e696d67666c69702e636f6d2f37696a7270782e6a7067)](https://camo.githubusercontent.com/48b0ba3611e183eb309e75d41a7748a90c4be87b34c1522515d2ede75eae29eb/68747470733a2f2f692e696d67666c69702e636f6d2f37696a7270782e6a7067)

**CHECKOUT** the [mxr576/composer-audit-changes](https://packagist.org/packages/mxr576/composer-audit-changes)"alternative" `composer audit` command because it can help with the adoption of this package on existing projects with collected technical debt.

Installation
------------

[](#installation)

```
$ composer require --dev mxr576/ddqg-composer-audit
```

Example output
--------------

[](#example-output)

```
$ composer audit
+-------------------+----------------------------------------------------------------------------------+
| Package           | drupal/apigee_edge                                                               |
| CVE               | DDQG-D10-incompatible-drupal-apigee_edge                                         |
| Title             | The installed "2.0.7.0" version is not compatible with Drupal 10. (Reported by D |
|                   | rupal Dependency Quality Gate.)                                                  |
| URL               | https://www.drupal.org/project/apigee_edge                                       |
| Affected versions | 2.0.7.0                                                                          |
| Reported at       | 2023-05-07T13:49:57+00:00                                                        |
+-------------------+----------------------------------------------------------------------------------+
+-------------------+----------------------------------------------------------------------------------+
| Package           | drupal/apigee_edge                                                               |
| CVE               | DDQG-insecure-drupal-apigee_edge                                                 |
| Title             | The installed "2.0.7.0" version is insecure. (Reported by Drupal Dependency Qual |
|                   | ity Gate.)                                                                       |
| URL               | https://www.drupal.org/project/apigee_edge                                       |
| Affected versions | >=1.0.0,=2.0.0,=9.4.0,=9.5.0,=10.0.0,