se7enxweb / exponential-platform-dxp-php-floor
Lets Exponential Platform DXP 4.6 projects install on every PHP version they declare (7.4 and later) with Composer's security blocking on: requires the fixed packages a PHP range needs.
Package info
github.com/se7enxweb/exponential-platform-dxp-php-floor
Type:metapackage
pkg:composer/se7enxweb/exponential-platform-dxp-php-floor
Requires
- php: >=8.0
Requires (Dev)
None
Suggests
None
Provides
None
Conflicts
None
Replaces
None
This package is auto-updated.
Last update: 2026-10-29 07:29:08 UTC
README
A Composer metapackage that lets the Exponential Platform DXP 4.6 projects (the DXP 4.6 skeletons and Exponential Platform Legacy 4.6) install on every PHP version they declare, from PHP 7.4 on, with Composer's security blocking on. It holds no code.
Some fixed releases exist only for part of that PHP range. Each version of this package requires what one PHP range needs, and Composer installs the one that fits the running PHP:
| Version | PHP | Requires | Why |
|---|---|---|---|
| 1.0.0 | 7.4 | se7enxweb/graphql-php ~14.11.11 |
ibexa/graphql 4.6 accepts overblog/graphql-bundle 0.14 or 1.6+. On PHP 7.4 only 0.14 installs, and it needs webonyx/graphql-php 14, which upstream no longer fixes. se7enxweb/graphql-php 14.11.11 replaces it with the 2026 fixes backported (CVE-2026-40476 and the parser recursion and validation cost advisories). |
| 1.1.0 | 8.0 and later | nothing | overblog/graphql-bundle 1.6+ and the fixed webonyx/graphql-php 15 install there. |
A project requires "se7enxweb/exponential-platform-dxp-php-floor": "^1.0". Because the fork replaces
webonyx/graphql-php at its own version, Packagist reports the upstream advisories against it: the project lists
their ids under config.policy.advisories.ignore-id (Composer 2.10+) and config.audit.ignore, each with the
reason that the fork carries the fix.
License: GPL-2.0-or-later.