Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires sylius/sylius ^2.0 -> satisfiable by sylius/sylius[v2.0.0-alpha.1, ..., v2.2.2]. - sylius/sylius[v2.0.0-beta.1, ..., v2.0.15] require symfony/process ^6.4 || ^7.1 -> found symfony/process[v6.4.0-BETA1, ..., v6.4.33, v7.1.0-BETA1, ..., v7.4.5] but these were not loaded, because they are affected by security advisories ("PKSA-rkkf-636k-qjb3", "PKSA-wws7-mr54-jsny"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. - sylius/sylius[v2.0.0-alpha.1, ..., v2.0.0-alpha.3] require enshrined/svg-sanitize ^0.16 -> found enshrined/svg-sanitize[0.16.0] but these were not loaded, because they are affected by security advisories ("PKSA-4g5g-4rkv-myqs"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. - sylius/sylius[v2.1.0, ..., v2.1.11] require symfony/process ^6.4 || ^7.2 -> found symfony/process[v6.4.0-BETA1, ..., v6.4.33, v7.2.0-BETA1, ..., v7.4.5] but these were not loaded, because they are affected by security advisories ("PKSA-rkkf-636k-qjb3", "PKSA-wws7-mr54-jsny"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. - sylius/sylius[v2.2.0, ..., v2.2.2] require symfony/process ^6.4 || ^7.4 -> found symfony/process[v6.4.0-BETA1, ..., v6.4.33, v7.4.0-BETA1, ..., v7.4.5] but these were not loaded, because they are affected by security advisories ("PKSA-rkkf-636k-qjb3", "PKSA-wws7-mr54-jsny"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.