Installing zf2 on travis via composer got output backplane/zendframework ?

[samsonasik]

I see at the develop branch, on travis, it got error when installing zendframework/zendframework :

 - Installing backplane/zendframework (2.2.5)

Downloading: connection...

[Composer\Downloader\TransportException]

The "https://api.github.com/repos/Backplane/zf2/zipball/4a7cf6a4cf791244e14

aa0ca49d1f06916b63202" file could not be downloaded (HTTP/1.1 404 Not Found

) 

I tried at my local PC to install zendframework/zendframework via composer and got same output :

Any something happen on composer or any addition setting required ?

[jkavalik]

backplane/zendframework showed when installing zf2.2.* and doctrine-(orm-)module 0.9.* because doctrine module bumped zf2 to 2.3.* and backplane/zendframework registered itself as alternative to zf2 - so composer instead of saying "2.2.5 not 2.3.* STOP" found alternative dev-develop. There is composer/composer#2690 about composer doing it automatically without warning but in cases I met, it was packages incompatibility and composer "too succesful" in resolving dependencies. backplane/zendframework was removed after someone from IRC mailed them few days ago.

[samsonasik]

the solution ?

[grizzm0]

backplane/zendframework was removed from both github and packagist within hours of people complaining about this. I'm not sure how composers cache works. But the day after I still got backplane when trying to update my project. Tried to "debug" it by installing one dependency at a time but never ran into the problem again. So I guess it was some kind of cache that got removed when I removed all dependencies in my composer.json and did an update.

[samsonasik]

@grizzm0 I tried locally and work, but at travis-ci.org seems it still load from backplane/zendframework :(

[Ocramius]

The simplest way to fix this temporarily is to add "conflict":{"backplane/zendframework":"*"} to your composer.json and then analyze why the set of requirements cannot be resolved.

[danizord]

It was fixed in Composer? Seems a security issue to me.

[ThaDafinser]

@samsonasik i had the same issue. Seems to be solved now.

About the security issue @padraic blogged something
http://blog.astrumfutura.com/2014/02/composer-downloading-random-code-is-not-a-security-vulnerability/

[samsonasik]

yes, closing ;), Thanks all ;)