rmrevin / yii2-file

composer.lock

{
    "_readme": [
        "This file locks the dependencies of your project to a known state",
        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#composer-lock-the-lock-file",
        "This file is @generated automatically"
    ],
    "hash": "e67a8911960f4744297cdac43be80603",
    "packages": [
        {
            "name": "bower-asset/jquery",
            "version": "2.1.4",
            "source": {
                "type": "git",
                "url": "https://github.com/jquery/jquery.git",
                "reference": "7751e69b615c6eca6f783a81e292a55725af6b85"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/jquery/jquery/zipball/7751e69b615c6eca6f783a81e292a55725af6b85",
                "reference": "7751e69b615c6eca6f783a81e292a55725af6b85",
                "shasum": ""
            },
            "require-dev": {
                "bower-asset/qunit": "1.14.0",
                "bower-asset/requirejs": "2.1.10",
                "bower-asset/sinon": "1.8.1",
                "bower-asset/sizzle": "2.1.1-patch2"
            },
            "type": "bower-asset-library",
            "extra": {
                "bower-asset-main": "dist/jquery.js",
                "bower-asset-ignore": [
                    "**/.*",
                    "build",
                    "dist/cdn",
                    "speed",
                    "test",
                    "*.md",
                    "AUTHORS.txt",
                    "Gruntfile.js",
                    "package.json"
                ]
            },
            "license": [
                "MIT"
            ],
            "keywords": [
                "javascript",
                "jquery",
                "library"
            ]
        },
        {
            "name": "bower-asset/jquery.inputmask",
            "version": "3.1.63",
            "source": {
                "type": "git",
                "url": "https://github.com/RobinHerbots/jquery.inputmask.git",
                "reference": "c40c7287eadc31e341ebbf0c02352eb55b9cbc48"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/RobinHerbots/jquery.inputmask/zipball/c40c7287eadc31e341ebbf0c02352eb55b9cbc48",
                "reference": "c40c7287eadc31e341ebbf0c02352eb55b9cbc48",
                "shasum": ""
            },
            "require": {
                "bower-asset/jquery": ">=1.7"
            },
            "type": "bower-asset-library",
            "extra": {
                "bower-asset-main": [
                    "./dist/inputmask/jquery.inputmask.js",
                    "./dist/inputmask/jquery.inputmask.extensions.js",
                    "./dist/inputmask/jquery.inputmask.date.extensions.js",
                    "./dist/inputmask/jquery.inputmask.numeric.extensions.js",
                    "./dist/inputmask/jquery.inputmask.phone.extensions.js",
                    "./dist/inputmask/jquery.inputmask.regex.extensions.js"
                ],
                "bower-asset-ignore": [
                    "**/.*",
                    "qunit/",
                    "nuget/",
                    "tools/",
                    "js/",
                    "*.md",
                    "build.properties",
                    "build.xml",
                    "jquery.inputmask.jquery.json"
                ]
            },
            "license": [
                "http://opensource.org/licenses/mit-license.php"
            ],
            "description": "jquery.inputmask is a jquery plugin which create an input mask.",
            "keywords": [
                "form",
                "input",
                "inputmask",
                "jquery",
                "mask",
                "plugins"
            ]
        },
        {
            "name": "bower-asset/punycode",
            "version": "v1.3.2",
            "source": {
                "type": "git",
                "url": "https://github.com/bestiejs/punycode.js.git",
                "reference": "38c8d3131a82567bfef18da09f7f4db68c84f8a3"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/bestiejs/punycode.js/zipball/38c8d3131a82567bfef18da09f7f4db68c84f8a3",
                "reference": "38c8d3131a82567bfef18da09f7f4db68c84f8a3",
                "shasum": ""
            },
            "type": "bower-asset-library",
            "extra": {
                "bower-asset-main": "punycode.js",
                "bower-asset-ignore": [
                    "coverage",
                    "tests",
                    ".*",
                    "component.json",
                    "Gruntfile.js",
                    "node_modules",
                    "package.json"
                ]
            }
        },
        {
            "name": "bower-asset/yii2-pjax",
            "version": "v2.0.4",
            "source": {
                "type": "git",
                "url": "https://github.com/yiisoft/jquery-pjax.git",
                "reference": "3f20897307cca046fca5323b318475ae9dac0ca0"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/yiisoft/jquery-pjax/zipball/3f20897307cca046fca5323b318475ae9dac0ca0",
                "reference": "3f20897307cca046fca5323b318475ae9dac0ca0",
                "shasum": ""
            },
            "require": {
                "bower-asset/jquery": ">=1.8"
            },
            "type": "bower-asset-library",
            "extra": {
                "bower-asset-main": "./jquery.pjax.js",
                "bower-asset-ignore": [
                    ".travis.yml",
                    "Gemfile",
                    "Gemfile.lock",
                    "vendor/",
                    "script/",
                    "test/"
                ]
            },
            "license": [
                "MIT"
            ]
        },
        {
            "name": "cebe/markdown",
            "version": "1.1.0",
            "source": {
                "type": "git",
                "url": "https://github.com/cebe/markdown.git",
                "reference": "54a2c49de31cc44e864ebf0500a35ef21d0010b2"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/cebe/markdown/zipball/54a2c49de31cc44e864ebf0500a35ef21d0010b2",
                "reference": "54a2c49de31cc44e864ebf0500a35ef21d0010b2",
                "shasum": ""
            },
            "require": {
                "lib-pcre": "*",
                "php": ">=5.4.0"
            },
            "require-dev": {
                "cebe/indent": "*",
                "facebook/xhprof": "*@dev",
                "phpunit/phpunit": "4.1.*"
            },
            "bin": [
                "bin/markdown"
            ],
            "type": "library",
            "extra": {
                "branch-alias": {
                    "dev-master": "1.1.x-dev"
                }
            },
            "autoload": {
                "psr-4": {
                    "cebe\\markdown\\": ""
                }
            },
            "notification-url": "https://packagist.org/downloads/",
            "license": [
                "MIT"
            ],
            "authors": [
                {
                    "name": "Carsten Brandt",
                    "email": "mail@cebe.cc",
                    "homepage": "http://cebe.cc/",
                    "role": "Creator"
                }
            ],
            "description": "A super fast, highly extensible markdown parser for PHP",
            "homepage": "https://github.com/cebe/markdown#readme",
            "keywords": [
                "extensible",
                "fast",
                "gfm",
                "markdown",
                "markdown-extra"
            ],
            "time": "2015-03-06 05:28:07"
        },
        {
            "name": "ezyang/htmlpurifier",
            "version": "v4.6.0",
            "source": {
                "type": "git",
                "url": "https://github.com/ezyang/htmlpurifier.git",
                "reference": "6f389f0f25b90d0b495308efcfa073981177f0fd"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/ezyang/htmlpurifier/zipball/6f389f0f25b90d0b495308efcfa073981177f0fd",
                "reference": "6f389f0f25b90d0b495308efcfa073981177f0fd",
                "shasum": ""
            },
            "require": {
                "php": ">=5.2"
            },
            "type": "library",
            "autoload": {
                "psr-0": {
                    "HTMLPurifier": "library/"
                },
                "files": [
                    "library/HTMLPurifier.composer.php"
                ]
            },
            "notification-url": "https://packagist.org/downloads/",
            "license": [
                "LGPL"
            ],
            "authors": [
                {
                    "name": "Edward Z. Yang",
                    "email": "admin@htmlpurifier.org",
                    "homepage": "http://ezyang.com"
                }
            ],
            "description": "Standards compliant HTML filter written in PHP",
            "homepage": "http://htmlpurifier.org/",
            "keywords": [
                "html"
            ],
            "time": "2013-11-30 08:25:19"
        },
        {
            "name": "imagine/imagine",
            "version": "v0.5.0",
            "source": {
                "type": "git",
                "url": "https://github.com/avalanche123/Imagine.git",
                "reference": "f64ec666baaa800edcbf237db41121a569230709"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/avalanche123/Imagine/zipball/f64ec666baaa800edcbf237db41121a569230709",
                "reference": "f64ec666baaa800edcbf237db41121a569230709",
                "shasum": ""
            },
            "require": {
                "php": ">=5.3.2"
            },
            "require-dev": {
                "sami/sami": "dev-master"
            },
            "suggest": {
                "ext-gd": "to use the GD implementation",
                "ext-gmagick": "to use the Gmagick implementation",
                "ext-imagick": "to use the Imagick implementation"
            },
            "type": "library",
            "autoload": {
                "psr-0": {
                    "Imagine": "lib/"
                }
            },
            "notification-url": "https://packagist.org/downloads/",
            "license": [
                "MIT"
            ],
            "authors": [
                {
                    "name": "Bulat Shakirzyanov",
                    "email": "mallluhuct@gmail.com",
                    "homepage": "http://avalanche123.com"
                }
            ],
            "description": "Image processing for PHP 5.3",
            "homepage": "http://imagine.readthedocs.org/",
            "keywords": [
                "drawing",
                "graphics",
                "image manipulation",
                "image processing"
            ],
            "time": "2013-07-10 17:25:36"
        },
        {
            "name": "yiisoft/yii2",

There is a security advisory for your installed version of yiisoft/yii2:

class yii\web\ViewAction allowed to include arbitrary files that end with .php

            "version": "2.0.4",
            "source": {
                "type": "git",
                "url": "https://github.com/yiisoft/yii2-framework.git",
                "reference": "726867caee3f23aa7a6975c801e64b6021e14f86"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/yiisoft/yii2-framework/zipball/726867caee3f23aa7a6975c801e64b6021e14f86",
                "reference": "726867caee3f23aa7a6975c801e64b6021e14f86",
                "shasum": ""
            },
            "require": {
                "bower-asset/jquery": "2.1.*@stable | 1.11.*@stable",
                "bower-asset/jquery.inputmask": "3.1.*",
                "bower-asset/punycode": "1.3.*",
                "bower-asset/yii2-pjax": ">=2.0.1",
                "cebe/markdown": "~1.0.0 | ~1.1.0",
                "ext-mbstring": "*",
                "ezyang/htmlpurifier": "4.6.*",
                "lib-pcre": "*",
                "php": ">=5.4.0",
                "yiisoft/yii2-composer": "*"
            },
            "bin": [
                "yii"
            ],
            "type": "library",
            "extra": {
                "branch-alias": {
                    "dev-master": "2.0.x-dev"
                }
            },
            "autoload": {
                "psr-4": {
                    "yii\\": ""
                }
            },
            "notification-url": "https://packagist.org/downloads/",
            "license": [
                "BSD-3-Clause"
            ],
            "authors": [
                {
                    "name": "Qiang Xue",
                    "email": "qiang.xue@gmail.com",
                    "homepage": "http://www.yiiframework.com/",
                    "role": "Founder and project lead"
                },
                {
                    "name": "Alexander Makarov",
                    "email": "sam@rmcreative.ru",
                    "homepage": "http://rmcreative.ru/",
                    "role": "Core framework development"
                },
                {
                    "name": "Maurizio Domba",
                    "homepage": "http://mdomba.info/",
                    "role": "Core framework development"
                },
                {
                    "name": "Carsten Brandt",
                    "email": "mail@cebe.cc",
                    "homepage": "http://cebe.cc/",
                    "role": "Core framework development"
                },
                {
                    "name": "Timur Ruziev",
                    "email": "resurtm@gmail.com",
                    "homepage": "http://resurtm.com/",
                    "role": "Core framework development"
                },
                {
                    "name": "Paul Klimov",
                    "email": "klimov.paul@gmail.com",
                    "role": "Core framework development"
                }
            ],
            "description": "Yii PHP Framework Version 2",
            "homepage": "http://www.yiiframework.com/",
            "keywords": [
                "framework",
                "yii2"
            ],
            "time": "2015-05-10 20:09:47"
        },
        {
            "name": "yiisoft/yii2-composer",
            "version": "2.0.3",
            "source": {
                "type": "git",
                "url": "https://github.com/yiisoft/yii2-composer.git",
                "reference": "ca8d23707ae47d20b0454e4b135c156f6da6d7be"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/yiisoft/yii2-composer/zipball/ca8d23707ae47d20b0454e4b135c156f6da6d7be",
                "reference": "ca8d23707ae47d20b0454e4b135c156f6da6d7be",
                "shasum": ""
            },
            "require": {
                "composer-plugin-api": "1.0.0"
            },
            "type": "composer-plugin",
            "extra": {
                "class": "yii\\composer\\Plugin",
                "branch-alias": {
                    "dev-master": "2.0.x-dev"
                }
            },
            "autoload": {
                "psr-4": {
                    "yii\\composer\\": ""
                }
            },
            "notification-url": "https://packagist.org/downloads/",
            "license": [
                "BSD-3-Clause"
            ],
            "authors": [
                {
                    "name": "Qiang Xue",
                    "email": "qiang.xue@gmail.com"
                }
            ],
            "description": "The composer plugin for Yii extension installer",
            "keywords": [
                "composer",
                "extension installer",
                "yii2"
            ],
            "time": "2015-03-01 06:22:44"
        },
        {
            "name": "yiisoft/yii2-imagine",
            "version": "2.0.3",
            "source": {
                "type": "git",
                "url": "https://github.com/yiisoft/yii2-imagine.git",
                "reference": "0961343138b65bba447de84b2b300899617e6acc"
            },
            "dist": {
                "type": "zip",
                "url": "https://api.github.com/repos/yiisoft/yii2-imagine/zipball/0961343138b65bba447de84b2b300899617e6acc",
                "reference": "0961343138b65bba447de84b2b300899617e6acc",
                "shasum": ""
            },
            "require": {
                "imagine/imagine": "0.5.*",
                "yiisoft/yii2": "*"
            },
            "type": "yii2-extension",
            "extra": {
                "branch-alias": {
                    "dev-master": "2.0.x-dev"
                }
            },
            "autoload": {
                "psr-4": {
                    "yii\\imagine\\": ""
                }
            },
            "notification-url": "https://packagist.org/downloads/",
            "license": [
                "BSD-3-Clause"
            ],
            "authors": [
                {
                    "name": "Antonio Ramirez",
                    "email": "amigo.cobos@gmail.com"
                }
            ],
            "description": "The Imagine integration for the Yii framework",
            "keywords": [
                "helper",
                "image",
                "imagine",
                "yii2"
            ],
            "time": "2015-03-01 06:22:44"
        }
    ],
    "packages-dev": [],
    "aliases": [],
    "minimum-stability": "stable",
    "stability-flags": [],
    "prefer-stable": false,
    "prefer-lowest": false,
    "platform": {
        "php": ">=5.4.0"
    },
    "platform-dev": []
}