search

shipperhq / module-shipper

Base ShipperHQ Repo
Open Software License 3.0
21 stars 20 forks source link

Composer package issue #115

Closed pbaum83 closed 1 year ago

pbaum83 commented 2 years ago

Hello,

Just an FYI: today I noticed the following error while running a build. It seems like the composer library might have been compromised.

Is there anything we can do to resolve this on our end?

We have specified the following versions in our install:

        "shipperhq/library-graphql": "20.2.0",
        "shipperhq/library-shipper": "20.14.0",
        "shipperhq/library-ws": "20.5.0",
        "shipperhq/module-address-autocomplete": "20.3.3",
        "shipperhq/module-common": "20.9.3",
        "shipperhq/module-logger": "20.5.0",
        "shipperhq/module-shipper": "20.45.5",

Thanks, -Paul

ibraheemnabeelfauzi commented 2 years ago

Hey @pbaum83 - thanks for the heads up, this is known thing - here is the fix: https://docs.shipperhq.com/troubleshooting-magento-2-installations/#Installing_ShipperHQ_on_Magento_243_and_later

pbaum83 commented 2 years ago

Is that the proper solution to fix the problem removing the magento/composer-dependency-version-audit-plugin libarary?

We were able to resolve the problem by doing the following: composer require shipperhq/module-shipper:20.45.5 --no-plugins

ibraheemnabeelfauzi commented 2 years ago

@pbaum83 please see answer here noted by our lead Engineer Travis.