Security vulnerability due to nategood/httpful #222
Description
Hi, hope everyone is well.
I have the following issue:
Trying: composer global require nategood/httpful:^1.0.0
Leads to:
Problem 1
- Root composer.json requires nategood/httpful 1.0.0 (exact version match: 1.0.0 or 1.0.0.0), found nategood/httpful[1.0.0] but these were not loaded, likely because it conflicts with another require.
Problem 2
- cretueusebiu/valet-windows is locked to version 2.5.2 and an update of this package was not requested.
- cretueusebiu/valet-windows 2.5.2 requires nategood/httpful ^0.3 -> found nategood/httpful[0.3.0, 0.3.2] but it conflicts with your root composer.json require (1.0.0).
I'd appreciate any help.
Kind Regards,
Activity
yCodeTech commentedon Jan 24, 2025
@katsu-jin This repo is severely unmaintained.
This issue was fixed in my forked repo (among lots of other new features) by replacing the then-unmaintained nategood/httpful package in favour of
guzzlehttp/guzzle.
Please completely uninstall this version of Valet Windows and instead install my improved version, Laravel Valet Windows 3, with the following command: