How to install deptrac via composer about deptrac

[vudaltsov]

I would consider removing the "abandoned" status until you introduce a new way to install Deptrac.

[gennadigennadigennadi]

Could you check again? I unabandoned the shim for packagist.

[gennadigennadigennadi]

Just stay on the shim version for now. With shim being abandoned it does not change the usability of the shim version. Nothing changed for the shim but the archive/abandoned state.

The documentation v2 is not ready for the next release, yet. Hence the alpha version.

[NielsLinde]

We have a policy in place to don't allow abandoned packages but will try to find a workaround then.

Thank you for your quick reply!

[vudaltsov]

Nothing changed for the shim but the archive/abandoned state

@gennadigennadigennadi , well, smth changed. composer audit command reports abandoned packages as possible vulnerabilities. It broke our pipeline and we had to switch to config.audit.abandoned = "report" just because of this.

[NielsLinde]

@gennadigennadigennadi I agree with the latest reply.
This is impossible to fix in our projects and security templates.

We cannot use qossmic/deptrac yet and cannot use qossmic/deptrac-shim because of the abandoned state

[NielsLinde]

For me it is working now. Big thanks!