search

localgovdrupal / localgov_project

Project template for Drupal 10 sites built with the LocalGov Drupal distribution.
https://localgovdrupal.org
GNU General Public License v2.0
10 stars 8 forks source link

Trust phpstan/extension-installer? #123

Closed stephen-cox closed 1 year ago

stephen-cox commented 1 year ago

Starting to see the message 'Do you trust "phpstan/extension-installer" to execute code and wish to enable it now?' when updating things with composer.

We use phpstan with phpstan-drupal to check for code deprecations. We should check whether we need this composer plugin or not and adjust the allow-plugins section in the composer.json file accordingly.

stephen-cox commented 1 year ago

From the docs for the extension we could removed the includes section of our phpstan.neon file and use this extension to inclide the installed phpstan rules.