Download the PHP package boesing/captainhook-vendor-resolver without Composer
On this page you can find all versions of the php package boesing/captainhook-vendor-resolver. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download boesing/captainhook-vendor-resolver
More information about boesing/captainhook-vendor-resolver
Files in boesing/captainhook-vendor-resolver
Package captainhook-vendor-resolver
Short Description CaptainHook extension which parses vendor packages after installation to merge projects captainhook.json with hooks provided by vendor packages
License BSD-3-Clause
Informations about the package captainhook-vendor-resolver
captainhook-vendor-resolver
This composer-plugin introduces a package scan for captainhook/captainhook hooks.
So on every composer require
, composer install
or composer remove
call, this plugin checks the composer.json
of the installed/uninstalled package for hooks to add/remove from the captainhook.json
.
NOTE: As of captainhook v5.0, you can specify a dedicated captainhook.json
via --configuration
. If you are using this parameter, please provide the custom captainhook.json
path via captainhook-vendor-resolver.json
configuration next to your composer.json
.
Where is the difference to the already existing feature "includes"
As this package only parses the composer.json
and automagically inserts/removes the hooks, it will provide a proper diff to your project. There is no hidden hook specified in a file outside of your project.
Your projects captainhook.json
will always contain any hook which is being executed which can be easily reviewed in Pull Requests, e.g.
Example with the vendor resolver
captainhook.json
Current version of the vendor package...
vendor/package/composer.json
v1.0.0
After updating the vendor package...
vendor/package/composer.json
v1.0.1
diff captainhook.json
Example with includes (security implication)
captainhook.json
Current version of the vendor package...
vendor/package/captainhook.hooks.json
v1.0.0
After updating the vendor package...
vendor/package/captainhook.hooks.json
v1.0.1
diff captainhook.json
If you are not re-visiting your vendor packages for changes in that hook you are including, you will upload your whole project on the next git push
to the attackers website.
All versions of captainhook-vendor-resolver with dependencies
composer-plugin-api Version ^1.1
captainhook/captainhook Version ^5.0
webmozart/assert Version ^1.5