D8 Support

[grasmash]

I appears that the 8.x branch of this project simply includes a static composer.json file. Are there plans to build out the 8.x branch to provide dynamic checks for security advisories?

[webflo]

Nope it is up to date, updated 15 days ago. ff81bfc

Do you miss a specific security release?

[grasmash]

No, I just looked at the repo and saw only the composer.json, and made a bad assumption. I suppose I was expecting to see the script that generates it. I don't quite understand the mechanism that keeps the composer.json file up to date. Perhaps that's the code on the master branch, and an automated process runs on a server somewhere and updates the repo when there's a new release?

[webflo]

Master branch contains the build.sh. Its executed by circleci (https://github.com/drupal-composer/drupal-security-advisories/blob/master/circle.yml)

The circleci job runs every day, and every few hours on wednesday (because of the security release window).

[webflo]

Build History: https://circleci.com/gh/drupal-composer/drupal-security-advisories/tree/master