Skip to content

Add new LocalSecurityChecker#214

Closed
Florian-B wants to merge 1 commit into
EdgedesignCZ:masterfrom
Florian-B:feature/add-local-security-checker
Closed

Add new LocalSecurityChecker#214
Florian-B wants to merge 1 commit into
EdgedesignCZ:masterfrom
Florian-B:feature/add-local-security-checker

Conversation

@Florian-B

@Florian-B Florian-B commented Jan 27, 2021

Copy link
Copy Markdown

Add new LocalSecurityChecker (https://github.com/fabpot/local-php-security-checker) that replaces sensiolabs/security-checker (https://github.com/sensiolabs/security-checker)

@Florian-B Florian-B force-pushed the feature/add-local-security-checker branch from 1dcbf14 to 002ff42 Compare January 28, 2021 08:22
@Florian-B Florian-B force-pushed the feature/add-local-security-checker branch from 002ff42 to 6bb4830 Compare January 28, 2021 10:27
@paras-malhotra

Copy link
Copy Markdown
Contributor

There are several disadvantages of using local-php-security-checker including:

  1. It is licensed under the AGPLv3. This means if your app uses local-php-security-checker, it has to be licensed under AGPLv3. This makes it literally useless in any commercial and non-AGPLv3 apps.
  2. It includes binaries that depend on system architecture. So, this PR downloads the linux 386 binary but it will not work on other system architectures.
  3. It cannot be pulled by Composer and needs shell scripts to pull it in

I have proposed an alternative PR here: #215

@zdenekdrahos

Copy link
Copy Markdown
Member

Another disadvantage:

  • adding local-php-security-checker is BC for existing users, and keeping old security-checker is confusing for developers

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants