Hacker News Reader

Composer is very useful in penetration testing. Lot's of good information in the composer.json files people keep forgetting to block..

A Laravel or Symfony app operates out of the public/ directory, so composer.json shouldn’t need any blocking typically - it’d be outside the web root.

Yeah I remember the problems with composer. It's good now.

It is not a leak, it just loads too much data into memory so you need about 1 Gb of RAM to run composer update.

Yeah, that's not a thing anymore.