Download the PHP package vidaxl/rabbitmq-management-client without Composer

On this page you can find all versions of the php package vidaxl/rabbitmq-management-client. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package rabbitmq-management-client

RabbitMQ-Management-API-Client

Security research claim — defensive namespace hold. This repository is intentionally benign.

Why this repository exists

The Packagist package vidaxl/rabbitmq-management-client (~6,700 downloads at time of writing) lists

as its source URL for every released version. The original account was renamed (to zhi35), which released the revinbian username for re-registration — the precondition for a repo-jacking attempt against this package.

What the exposure actually is

Stable releases pin fixed commit SHAs and resolve distribution archives by repository ID, so a recreated repository fails closed for stable installs of the published versions. Pinning to those releases does not pull content from a re-registered namespace.

The real exposure is two conditional future channels:

  1. Mutable dev-ref metadata — development branches such as dev-revinbian-patch-1 and dev-Async could have their metadata rewritten on a future Packagist crawl.
  2. New-tag ingestion — a malicious new tag (for example 0.2.3, satisfying existing ^0.2 constraints) could be picked up through Packagist auto-update.

Both channels additionally depend on Packagist rebinding to the recreated repository identity, which is publicly undemonstrated.

Why we hold the namespace anyway

  1. Document the exposure precisely — the precondition (an unclaimed source namespace) was real and verifiable.
  2. Close the window defensively — while this namespace is held by a researcher, a malicious party cannot claim it.

What this repository contains

Nothing that runs. No executable code, no install hooks, no callbacks, no beacons. Only this README and the inert marker file SECURITY-RESEARCH-MARKER.txt.

If you are vidaXL

Update the package's source URL on Packagist (or abandon/replace the package), and review any environment that installs it, especially against dev refs or open version constraints. This namespace can be transferred to you on verified request.

If you are the original revinbian (now zhi35)

Get in touch to reclaim this namespace.

Contact: [email protected]

All versions of rabbitmq-management-client with dependencies

PHP Build Version
Package Version
Requires doctrine/common Version >=2.0
guzzlehttp/guzzle Version ^5.3|^6.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package vidaxl/rabbitmq-management-client contains the following files

Loading the files please wait ...