zeal / namespace-placeholder
Reserved namespace placeholder. Holds the 'zeal' vendor on Packagist so that internal package names cannot be registered by a third party. Not for public use.
Package info
github.com/momenbasel/zeal-namespace-placeholder
pkg:composer/zeal/namespace-placeholder
Requires
- php: >=7.4
README
Reserved namespace. This package has no functionality and should not be installed.
Zeal uses zeal/* as a vendor prefix for internal Composer packages that are
distributed through private VCS repositories, never through Packagist. This
placeholder holds the vendor name so nobody else can register under it and have
their code substituted into a build - the attack known as dependency confusion.
If this package appeared in your composer.lock, a root composer.json
is missing the repositories entry for the real package and Composer fell
through to Packagist. Add the VCS repository rather than pinning around this.
Contact: security@getzeal.io