flatt-security / hola-takumi-php
Takumi Guard blocklist test fixture (canary). Intentionally blocked by packagist.flatt.tech — do not depend on this package.
Maintainers
Requires
- php: >=8.0
This package is not auto-updated.
Last update: 2026-06-11 18:04:01 UTC
README
⚠️ This is a test fixture, not a real library. Do not depend on it.
A deliberately trivial Composer package owned by GMO Flatt Security, used as a
blocklist canary for Takumi Guard's Composer
(Packagist) registry proxy at packagist.flatt.tech.
Why this exists
Takumi Guard blocks known-malicious packages at the registry-proxy layer. To verify that the block path works end-to-end in a real environment — without ever touching a real package that a customer might legitimately depend on — we keep this package permanently on the Guard blocklist and assert that resolving it through the proxy is rejected.
Because the blocklist gate runs before any upstream fetch, this package does
not need to be published to packagist.org for the test to be meaningful: a
composer require flatt-security/hola-takumi-php routed through
packagist.flatt.tech returns HTTP 403 at metadata resolution time.
Expected behavior
| Path | Through packagist.flatt.tech |
|---|---|
GET /p2/flatt-security/hola-takumi-php.json |
403 (X-Guard-Notice: package-blocked) |
composer require flatt-security/hola-takumi-php |
fails to resolve (blocked) |
If this package ever resolves successfully through the proxy, the Guard blocklist path has regressed.
Repository status
Internal. This repository is intentionally not published and carries no support guarantees.