framework/extensions/package-manager
Daniël Klabbers e771b908d5
Patch vulnerability advisory (#3966)
Seems composer has a vulnerability, see https://github.com/advisories/GHSA-7c6p-848j-wh5h


Affected versions
>= 2.0.0-alpha1, < 2.2.23 -- patched in 2.2.23
>= 2.3.0-rc1, < 2.7.0 -- patched in 2.7.0

---

Let's raise the minimum to enforce the latest.

Thank you @peopleinside for reporting this.
2024-02-22 11:40:56 +01:00
..
assets Minor flarum update 2021-09-27 10:16:01 +01:00
js Bundled output for commit 3fbe05fd18 2024-01-22 18:01:17 +00:00
less feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00
locale feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00
migrations feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00
src feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00
tests feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00
.gitattributes chore: add .gitattributes to extensions to export-ignore files. (#3513) 2022-07-08 20:38:20 +01:00
.gitignore chore: flarum-cli audit infra --fix 2022-01-24 14:41:29 -05:00
composer.json Patch vulnerability advisory (#3966) 2024-02-22 11:40:56 +01:00
extend.php feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00
LICENSE.md feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00
README.md feat(em): port extension manager from 1.0 (#3959) 2024-01-22 18:58:08 +01:00

Extension Manager

The extension manager is a tool that allows you to easily install and manage extensions. It runs composer under the hood.

Security

If admin access is given to untrustworthy users, they can install malicious extensions. Please be careful.

This extension is optional and can be removed for those who prefer to manually manage installs and updates through the command line interface.

Troubleshooting

If you have many extensions installed, you may run into memory issues when using the extension manager. If this happens, you can use an asynchronous queue that will run the extension manager in the background.

You can find detailed logs on the extension manager operations in the storage/logs/composer directory. Please include the latest log file when reporting issues in the Flarum support forum.