Quote:Package operations: 34 installs, 0 updates, 0 removals
- Installing psr/log (1.1.0): Loading from cache
- Installing kint-php/kint (2.2): Downloading (100%)
- Installing zendframework/zend-escaper (2.6.0): Downloading (100%)
- Installing codeigniter4/codeigniter4-standard (1.0.1): Downloading (100%)
- Installing mikey179/vfsstream (v1.6.6): Downloading (100%)
- Installing sebastian/version (2.0.1): Loading from cache
- Installing sebastian/resource-operations (2.0.1): Downloading (100%)
- Installing sebastian/recursion-context (3.0.0): Downloading (100%)
- Installing sebastian/object-reflector (1.1.1): Downloading (100%)
- Installing sebastian/object-enumerator (3.0.3): Downloading (100%)
- Installing sebastian/global-state (2.0.0): Downloading (100%)
- Installing sebastian/exporter (3.1.0): Downloading (100%)
- Installing sebastian/environment (4.1.0): Downloading (100%)
- Installing sebastian/diff (3.0.2): Downloading (100%)
- Installing sebastian/comparator (3.0.2): Downloading (100%)
- Installing phpunit/php-timer (2.1.1): Downloading (100%)
- Installing phpunit/php-text-template (1.2.1): Loading from cache
- Installing phpunit/php-file-iterator (2.0.2): Downloading (100%)
- Installing theseer/tokenizer (1.1.2): Downloading (100%)
- Installing sebastian/code-unit-reverse-lookup (1.0.1): Loading from cache
- Installing phpunit/php-token-stream (3.0.1): Downloading (100%)
- Installing phpunit/php-code-coverage (6.1.4): Downloading (100%)
- Installing doctrine/instantiator (1.2.0): Downloading (100%)
- Installing symfony/polyfill-ctype (v1.11.0): Downloading (100%)
- Installing webmozart/assert (1.4.0): Loading from cache
- Installing phpdocumentor/reflection-common (1.0.1): Loading from cache
- Installing phpdocumentor/type-resolver (0.4.0): Loading from cache
- Installing phpdocumentor/reflection-docblock (4.3.0): Downloading (100%)
- Installing phpspec/prophecy (1.8.0): Loading from cache
- Installing phar-io/version (2.0.1): Downloading (100%)
- Installing phar-io/manifest (1.0.3): Downloading (100%)
- Installing myclabs/deep-copy (1.9.0): Downloading (100%)
- Installing phpunit/phpunit (7.5.8): Downloading (100%)
- Installing squizlabs/php_codesniffer (3.4.1): Downloading (100%)
Do all of these packages really need to be used? To ensure the security of a product implemented on any framework, I must be sure not only about the security of the code of the framework itself, but also about the security of the code of its dependencies. Here, either you need to abandon dependency updates (and refuse to fix them as well), or constantly monitor the status of the code. And this is in addition to the need to monitor the product itself. Versions CI 1-3 allowed to concentrate only on the product code. I use CI since version 1.7 and during this time I have enough to study it and accumulate my own code, which are transferred from one project to another.
At the same time, I understand that it is easier to use already proven code than to write the same code of your own. My question is caused by the fact that some time ago there were problems with phpunit.
With the release of PHP 7, it became clear that CI in the form that now can not develop and need updates. Simply, could you review the list of dependent packages.
Thanks to CI Team for your great work.
