1.0.0-alpha2

This release fixes a bug with URL encoding (#61), and bumps the required version of Composer to 2.2 (#73).

DO NOT use in production for secure downloads! This plugin, as well as the PHP-TUF library it depends on, are not yet considered a complete or secure implementation of the TUF framework. Pre-release versions of this plugin should only be used for testing, development and feedback.

This will integrate with Composer repositories with server-side TUF support. To use it, you will need an initial file of trusted TUF metadata specific to the secure repository. Then, in the repository configuration in your composer.json, set the key "tuf": true. See README for more information, and the example project included for testing.

1.0.0-alpha1

This is the first official pre-release of PHP-TUF for Composer!

DO NOT use in production for secure downloads! This plugin, as well as the PHP-TUF library it depends on, are not yet considered a complete or secure implementation of the TUF framework. Pre-release versions of this plugin should only be used for testing, development and feedback.

Requires Composer 2.1 or later.

This will integrate with Composer repositories with server-side TUF support. To use it, you will need an initial file of trusted TUF metadata specific to the secure repository. Then, in the repository configuration in your composer.json, set the key "tuf": true. See README for more information, and the example project included for testing.