Open
Description
Extraneous dependencies and platform requirements should be marked as such.
Relevant CycloneDX specification: CycloneDX/specification#321
How this is specified in composer: https://getcomposer.org/doc/articles/composer-platform-dependencies.md
The following types of platform packages exist and can be depended on:
PHP (`php` and the subtypes: `php-64bit`, `php-ipv6`, `php-zts php-debug`) PHP Extensions (`ext-*`, e.g. `ext-mbstring`) PHP Libraries (`lib-*`, e.g. `lib-curl`) Composer (`composer`, `composer-plugin-api`, `composer-runtime-api`)
To see the complete list of platform packages available in your environment you can run
php composer.phar show --platform
(orshow -p
for short).The differences between the various Composer platform packages are explained further in this document.
Activity