BICZÓ Dezső

I code for fun.

CTO at @Pronovix

[BICZÓ Dezső @IEMIXER]

Is not this version number beautiful? 😍
111111111111111111111111111....

#Drupal

[BICZÓ Dezső @IEMIXER]

As a little pre-Christmas gift, my #Composer plugins got #PHP 8.4 support today. 🎄

https://t.co/0iv0EJu8mM

https://t.co/B5utIrb6Jn

#opensource #dependencyTrack #securityAudit #maintainability

[thedroptimes @thedroptimes]

🔒 @Pronovix enhances Drupal’s username privacy with 2 open-source modules for fine-grained control. Built for AI era, these tools boost security while maintaining flexibility for diverse needs. 🥂 for Drupal’s API-first future! 🚀 https://t.co/3eIpixSFm8 @aakosh @iEMIXER

[BICZÓ Dezső @IEMIXER]

@tucksaun hi, I have a recurring reminder since SymfonyOnline to check your Github profile whether you have shared code related to your "Multi-tenant applications using Symfony, for real?" presentation. I haven't found anything related, but maybe I was looking at the wrong place

[BICZÓ Dezső @IEMIXER]

TIL that #[\SensitiveParameter] in #PHP is not as powerful as I thought so... it simply does nothing in hierarchies.

https://t.co/Yp3XeSMh1l
https://t.co/MF1ylthCfW

[BICZÓ Dezső @IEMIXER]

Just found @jiripudil's awesome #PHPStan #generics deep dive presentation. This is a super valuable asset for learning the essentials.

I very much liked the "you've already used it" slides, they bring this idea more closer to the audience.

https://t.co/g33JbM5TbV

[BICZÓ Dezső @IEMIXER]

Composer 2.6.0 related enhancements were added to my Composer plugins and they also got the RC1 tag. Happy testing! :)

Hopefully audit ignore feature helps with the adaptation of ddqg-composer-audit on #Drupal projects 🙈

https://t.co/LJ45VYArYL
https://t.co/Kcq8N0b6Bp

[Jordi Boggiano @seldaek]

Composer 2.6 is now available! It comes with many small improvements and fixes across the board. Thanks to all contributors and to @packagist customers for allowing me to keep spending time working on this! https://t.co/14JFh2qVHj #composerphp #phpc

[BICZÓ Dezső @IEMIXER]

\o/
With the support of @pronovix I contributed 2 important changes to the Audit component.
PR11605 changed the new ignore feature's implementation before the release and PR#11436 added support for multiple sec. advisory sources.

https://t.co/CAzjQFb5O5
https://t.co/MnI9Ie5rk4

[Jordi Boggiano @seldaek]

Composer 2.6 is now available! It comes with many small improvements and fixes across the board. Thanks to all contributors and to @packagist customers for allowing me to keep spending time working on this! https://t.co/14JFh2qVHj #composerphp #phpc

[BICZÓ Dezső @IEMIXER]

@pronovix @pronskiy hi, could this be a good material for Phpstorm annotated monthly? The blogpost or just the referenced Composer extensions

[BICZÓ Dezső @IEMIXER]

As a hobby project I've added some Drupal steroids to #ComposerPHP's audit command. I also explained the reasons behind that in my new blog post on @pronovix's blog https://t.co/P1D5mowFpx

P.s. Don't miss the new composer audit-changes command either

#php #foss #audit #security

[BICZÓ Dezső @IEMIXER]

I am trying to explain colleagues why something is rather a domain- than an application service. I may have went a bit far with this diagram from the original problem statement... :) What do you think?

#DDD #hexagonalarchitecture #onionarchitecture

[BICZÓ Dezső @IEMIXER]

Composer audit is already on Drupal steroid, did you know that?

#Drush #DrupalConPittsburgh #Drupal #Composer

[BICZÓ Dezső @IEMIXER]

@DrushCli Fun fact, they can be already there... 😉

https://t.co/LJ45VYArYL

[BICZÓ Dezső @IEMIXER]

@DrushCli Fun fact, they can be already there... 😉

https://t.co/LJ45VYArYL

[BICZÓ Dezső @IEMIXER]

Kudos to @tidelift for all resource materials that I have used for this article!

[BICZÓ Dezső @IEMIXER]

As a hobby project I've added some Drupal steroids to #ComposerPHP's audit command. I also explained the reasons behind that in my new blog post on @pronovix's blog https://t.co/P1D5mowFpx

P.s. Don't miss the new composer audit-changes command either

#php #foss #audit #security

[BICZÓ Dezső @IEMIXER]

Have you seen a pending CR/MR/PR before that was blocked because a security advisory has just been released for a existing dependency? Solution: Only audit changed packages!

https://t.co/Kcq8N0b6Bp

#php #Composer #opensource

[pronovix @pronovix]

We're proud to announce that Pronovix has been audited and certified as meeting the requirements of ISO/IEC 27001:2013 in the areas of software development, support, hosting and maintenance.

We continue the hard work to deliver best-in-class services to our customers 🚀

[BICZÓ Dezső @IEMIXER]

Dear #Drupal community!

Let me promote my new tool that enhances "composer audit" with extra advisories for insecure- (even if there is no CVE) and unsupported versions!

Share in the thread if your project passed on it, you should be proud!

#FOSS #php

https://t.co/LJ45VYArYL

[BICZÓ Dezső @IEMIXER]

I must admit, I have got a bit addicted on mass-analyzing dependency trees =] (See mxr576/ddqg package)

It is also good to see that within a week, 3 projects got a D10 stable release. Keep up the good work everyone!

#Drupal

[BICZÓ Dezső @IEMIXER]

Today I have built a quick CLI tool for @pronovix that uses composer.lock and Update Status API to list all installed dependencies that are not #Drupal 10 compatible atm with info about whether there is a D10 available version or not.

[BICZÓ Dezső @IEMIXER]

I've worked on a pet project in the weekend: #Drupal Dependency Quality Gate (#ddqg).
For now, only quality-level-max is available and auto-generated with GHA with unsupported projects and versions.
https://t.co/2qiv3JRGRM

See what could come in the README

#highQualityDrupal

[BICZÓ Dezső @IEMIXER]

@VotrubaT @phpstan Me neither just tried to connect some dots based on what I have seen before... :D

You can consider consulting with Ondrej or just go for this idea...