#packagist

[cyber-sec]

That WordPress Theme You Installed Might Be Secretly Redirecting Your Visitors

Six counterfeit PHP themes on Packagist hid malicious code inside fake jQuery files, silently siphoning visitor data and funnelling mobile users to gambling sites through infrastructure run by a US-sanctioned cybercrime network.

Source: Socket

Read more: CyberSecBrief

[orbitbrain]

Critical Packagist Vulnerability Opened Door for PHP Supply Chain Attack

Critical Packagist Vulnerability Opened Door for PHP Supply Chain Attack

Home › Vulnerabilities Critical Packagist Vulnerability Opened Door for PHP Supply Chain Attack By Ionut Arghire on October 04, 2022 Tweet Code security company SonarSource today published details on a severe vulnerability impacting Packagist, which could have been abused to mount supply chain attacks targeting the PHP community. Packagist is the default repository for PHP dependency manager…

View On WordPress

[gslin]

Packagist.org 要搬到 AWS 上...

Packagist.org 要搬到 AWS 上…

Packagist 打算把服務丟上 AWS：「An Update on Packagist.org Hosting」。

We decided to migrate the packagist.org website to AWS as well, including the database, metadata update workers, etc. This makes it much easier to build a highly-available setup, where machines can be rebooted or even rebuilt safely without bringing down the whole site.

不知道會搬多少上去… 目前 .com 的 packagist.com 已經上 AWS 了，但 packagist.org與主要的流量來源

View On WordPress

[gslin]

2018 五月 Packagist 看到的 PHP 版本分佈 在「PHP Versions Stats - 2018.1 Edition」這邊看到這次的統計資料了，可以看到會使用 Composer (以及 Packagist) 的 PHP 版本中，7.0+ 已經是 78% 了，半年前是 67% 左右... 除了 PHP 5.x 以外，PHP 7.0 也是 12 月要停止支援 (2018/12/3)，比 PHP 5.6 的支援期還早一個月左右 XD

[gslin]

PHP {7.1,7.0,5.6} 總算成為主流了...

PHP {7.1,7.0,5.6} 總算成為主流了…

PHP {7.1,7.0,5.6} (至少有安全性支援的版本) 佔了 90% 以上的量… 至少是有用 Composer 族群的主流了：「PHP Versions Stats – 2017.2 Edition」。 All versions Grouped PHP 7.1.10 11.63% PHP 7.1 36.63% (+18.99) PHP 7.0.22 7.95% PHP 7.0 30.76% (-5.36) PHP 5.6.31 7.38% PHP 5.6 23.28% (-8.16) PHP 5.6.30 7.23% PHP 5.5 6.11% (-4.5) PHP 7.0.24 5.45% PHP 5.4 1.51% (-1.6) PHP 7.1.11 4.55% PHP 5.3 0.76% (-0.22) 可以看出大家都在往 PHP 7.1 推了…

View On WordPress

[tamtamchik]

simple-flash - Easy, framework agnostic flash notifications.

New version with Templates is out! Yay!

[tamtamchik]

namecase - This package allows you to convert names into the correct case where possible.

So, well, while I was absent, I created a package for fixing names case (LOUIS XIV = Louis XIV). And it collected 46 stars on GitHub. This is my personal record so far!

[gslin]

PHP 的生命週期

從 PHP 網站上的「Supported Versions」與「Unsupported Branches」可以看到今年九月初 PHP 5.4 就已經停止維護了 (包括安全性更新也停了)。 在「PHP Versions Stats – 2015 Edition」這邊利用 Packagist 的資料分析，還是可以看到很多人用 PHP 5.3 與 PHP 5.4： 唔，很符合 PHP 社群以及各家 hosting 萬年不更新的使用習慣…？

View On WordPress