view vendor/symfony/psr-http-message-bridge/composer.json @ 13:5fb285c0d0e3

Update Drupal core to 8.4.7 via Composer. Security update; I *think* we've
been lucky to get away with this so far, as we don't support self-registration
which seems to be used by the so-called "drupalgeddon 2" attack that 8.4.5
was vulnerable to.

{
    "name": "symfony/psr-http-message-bridge",
    "type": "symfony-bridge",
    "description": "PSR HTTP message bridge",
    "keywords": ["http", "psr-7", "http-message"],
    "homepage": "http://symfony.com",
    "license": "MIT",
    "authors": [
        {
            "name": "Fabien Potencier",
            "email": "[e-mail]"
        },
        {
            "name": "Symfony Community",
            "homepage": "http://symfony.com/contributors"
        }
    ],
    "require": {
        "php": ">=5.3.3",
        "psr/http-message": "~1.0",
        "symfony/http-foundation": "~2.3|~3.0|~4.0"
    },
    "require-dev": {
        "symfony/phpunit-bridge": "~3.2|4.0"
    },
    "suggest": {
        "psr/http-message-implementation": "To use the HttpFoundation factory",
        "zendframework/zend-diactoros": "To use the Zend Diactoros factory"
    },
    "autoload": {
        "psr-4": { "Symfony\\Bridge\\PsrHttpMessage\\": "" }
    },
    "minimum-stability": "dev",
    "extra": {
        "branch-alias": {
            "dev-master": "1.0-dev"
        }
    }
}