Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot install due to magento/composer-dependency-version-audit-plugin #94

Open
jhannanburpee opened this issue Jun 22, 2022 · 1 comment

Comments

@jhannanburpee
Copy link

jhannanburpee commented Jun 22, 2022

magento/composer-dependency-version-audit-plugin is flagging the extension during composer install.

Higher matching version 9.0.0 of bazaarvoice/bazaarvoice-magento2-ext was found in public repository packagist.org than 8.3.5 in private https://repo.magento.com. Public package might've been taken over by a malicious entity, please investigate and update package requirement to match the version from the private repository

Per the documentation: Composer plugin against Dependency Confusion attacks

Extension does not exist in the Magento Marketplace.

@slymbo
Copy link

slymbo commented Jun 24, 2022

@jhannanburpee Just flow this steps and you will install it

composer require bazaarvoice/bazaarvoice-magento2-ext:^8.0 --no-update
composer update

php bin/magento module:enable Bazaarvoice_Connector
php bin/magento setup:upgrade

By this way you can install the latest version of bazaarvoice 8
I hope that's helpful, because this extension was deleted from Magento marketplace but still in Magento repository

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants