由于symfony/flex，Composer安装突然失败

Question

我突然遇到了这个问题。我没有修改composer中的任何东西，直到上周它都运行得很好。现在，当我运行composer install时，我会得到如下结果：

Generating autoload files
ocramius/package-versions:  Generating version class...
ocramius/package-versions: ...done generating version class


  [ErrorException]
  Undefined index: vulnerabilities

这使得我的部署崩溃，现在我不能发布任何关于试运行或生产的东西。

我已经逐个删除了软件包，并设法将问题追溯到symfony/flex。我试着更新它，但composer只是冻结在一个随机的步骤，这对我来说没有任何意义。

我试着删除它并运行一个干净的composer require symfony/flex，以防我的版本出现问题-它会安装它，然后尝试更新依赖项，然后永远冻结。

我试过了：

composer clearcache

composer self-update

composer update --no-plugins --noscripts

毫无办法。它在更新时仍然冻结，并且在安装时仍然给我错误。我快要绝望了。

这是我的composer.json文件：

{
  "type": "project",
  "minimum-stability": "dev",
  "prefer-stable": true,
  "require": {
    "php": "^7.1.3",
    "ext-iconv": "*",
    "ext-json": "*",
    "ext-intl": "*",
    "beberlei/doctrineextensions": "^1.2",
    "brick/math": "0.7.*",
    "doctrine/doctrine-bundle": "^1.12.6",
    "dompdf/dompdf": "^0.8.2",
    "fervo/enum-bundle": "^2.2",
    "friendsofsymfony/jsrouting-bundle": "^2.1",
    "friendsofsymfony/rest-bundle": "^2.0",
    "friendsofsymfony/user-bundle": "^2.1.2",
    "knplabs/knp-snappy-bundle": "^1.5",
    "lexik/jwt-authentication-bundle": "^2.6",
    "nelmio/api-doc-bundle": "^3.6",
    "phpoffice/phpword": "^0.14.0",
    "predis/predis": "^1.1",
    "sc0vu/web3.php": "dev-master",
    "sensio/framework-extra-bundle": "^5.1",
    "sg/datatablesbundle": "v1.0.4",
    "simplethings/entity-audit-bundle": "^1.0",
    "snc/redis-bundle": "^2.0",
    "sonata-project/admin-bundle": "^3.49",
    "sonata-project/doctrine-orm-admin-bundle": "^3.4",
    "sonata-project/easy-extends-bundle": "^2.5",
    "sonata-project/user-bundle": "^4.1",
    "symfony/asset": "^4.0",
    "symfony/console": "^4.0",
    "symfony/debug-pack": "*",
    "symfony/expression-language": "^4.0",
    "symfony/flex": "v1.1",
    "symfony/form": "^4.0",
    "symfony/framework-bundle": "^4.0",
    "symfony/monolog-bundle": "^3.1",
    "symfony/orm-pack": "^1.0",
    "symfony/process": "^4.0",
    "symfony/security": "^4.0",
    "symfony/security-bundle": "^4.0",
    "symfony/security-csrf": "^v4.0",
    "symfony/serializer-pack": "*",
    "symfony/swiftmailer-bundle": "^3.1",
    "symfony/translation": "^4.0",
    "symfony/validator": "^4.0",
    "symfony/web-link": "^4.0",
    "symfony/webpack-encore-pack": "^1.0",
    "symfony/yaml": "^4.0",
    "twilio/sdk": "^5.0",
    "web3p/ethereum-tx": "^0.3.4",
    "willdurand/js-translation-bundle": "2.6.6"
  },
  "require-dev": {
    "ext-json": "*",
    "behat/symfony2-extension": "^2.1.5",
    "doctrine/data-fixtures": "^1.3",
    "hautelook/alice-bundle": "^2.0",
    "phpmd/phpmd": "^2.6",
    "phpstan/phpstan": "^0.10.6",
    "squizlabs/php_codesniffer": "^3.3",
    "symfony/browser-kit": "^4.0",
    "symfony/css-selector": "^4.0",
    "symfony/dotenv": "^4.0",
    "symfony/maker-bundle": "^1.0",
    "symfony/phpunit-bridge": "~4.3.0",
    "symfony/profiler-pack": "*",
    "zitec/behat-extension": "dev-master@dev"
  },
  "config": {
    "preferred-install": {
      "*": "dist"
    },
    "sort-packages": true
  },
  "autoload": {
    "psr-4": {
      "App\\": "src/"
    }
  },
  "autoload-dev": {
    "psr-4": {
      "App\\Tests\\": ["tests/functional", "test/unit", "tests/api"]
    }
  },
  "replace": {
    "symfony/polyfill-iconv": "*",
    "symfony/polyfill-php71": "*",
    "symfony/polyfill-php70": "*",
    "symfony/polyfill-php56": "*"
  },
  "scripts": {
    "auto-scripts": {
      "cache:clear": "symfony-cmd",
      "cache:warmup": "symfony-cmd",
      "assets:install --symlink --relative %PUBLIC_DIR%": "symfony-cmd"
    },
    "post-install-cmd": [
      "@auto-scripts"
    ],
    "post-update-cmd": [
      "@auto-scripts"
    ]
  },
  "conflict": {
    "symfony/symfony": "*"
  },
  "extra": {
    "symfony": {
      "id": "04C3GOB2A6BKEGTJ93E6RLD8R5",
      "allow-contrib": true
    }
  }
}

我的composer版本是1.10.22

composer update --vvv在以下几行之后冻结：

Downloading http://repo.packagist.org/p/athletic/athletic%247c468034c468fcf26e08cb4c4e42c29c6058991f243753f391bf4be1a93476f1.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-athletic$athletic.json into cache
Downloading http://repo.packagist.org/p/laminas/laminas-stdlib%243063fe25485f2f11f7dcdae0d6592d8c4740bd0e4c6fbf5fac7141542cc10d34.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-laminas$laminas-stdlib.json into cache
Downloading http://repo.packagist.org/p/zendframework/zend-hydrator%24929a25c4d947fc57e2c18901b036ca54a167be6e1ac3b7a7ebc22757a91784a3.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-zendframework$zend-hydrator.json into cache
Downloading http://repo.packagist.org/p/laminas/laminas-hydrator%24a55a80ba78a25b92b6156070846ea5bcd90dfa7fc7c51c707f62695d865e56ab.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-laminas$laminas-hydrator.json into cache

有没有人知道可能是什么原因造成的，或者我可以试一下别的什么？非常高兴，非常感谢！

Answer 1

与symfony/flex的v1.1.8有相同的问题，将其更新到v1.17.2并解决了问题。

要更新它，只需运行：composer update symfony/flex