Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error installing via composer #3

Closed
mtjweb opened this issue Apr 5, 2022 · 1 comment
Closed

Error installing via composer #3

mtjweb opened this issue Apr 5, 2022 · 1 comment

Comments

@mtjweb
Copy link

mtjweb commented Apr 5, 2022

I'mgetting the following error when installing via Composer:

Higher matching version 104.1.0 of fooman/sameorderinvoicenumber-implementation-m2 was found in public repository packagist.org than 104.0.0 in private https://repo.magento.com. Public package might've been taken over by a malicious entity, please investigate and update package requirement to match the version from the private repository

@fooman
Copy link
Owner

fooman commented Apr 28, 2022

This is unfortunately due to Magento's composer plugin, essentially forcing any version to be released on Marketplace first (or exclusively). Since our publishing process to Marketplace is manual but to Packagist is automated there will always be a window where the version number on packagist will be ahead.

Closing this as this is not something that we can easily change from our end. You may want to follow this issue magento/composer-dependency-version-audit-plugin#6 to see what Adobe's plans are.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants