由于symfony/flex，Composer安装突然失败

我突然遇到了这个问题。我并没有改变《作曲者》中的任何内容，直到上周它才开始运行。现在，当我运行composer安装时，我在最后得到了以下信息：

Generating autoload files
ocramius/package-versions:  Generating version class...
ocramius/package-versions: ...done generating version class


  [ErrorException]
  Undefined index: vulnerabilities

这使得我的部署崩溃，现在我无法发布任何关于暂存或生产的内容

我已经一个接一个地删除了包，并设法将问题追溯到symfony/flex。我试图更新它，但作曲家只是冻结在一个随机步骤，这对我来说毫无意义

我已经尝试删除它，并运行一个干净的

编写器require symfony/flex

，以防我的版本出现问题-它会安装它，然后尝试更新依赖项并永久冻结

我试过：

composer clearcache

composer自我更新

composer更新--无插件--noscripts

什么都不管用。它在更新时仍然冻结，在安装时仍然给我错误信息。我几乎绝望了

这是我的composer.json文件：

{
  "type": "project",
  "minimum-stability": "dev",
  "prefer-stable": true,
  "require": {
    "php": "^7.1.3",
    "ext-iconv": "*",
    "ext-json": "*",
    "ext-intl": "*",
    "beberlei/doctrineextensions": "^1.2",
    "brick/math": "0.7.*",
    "doctrine/doctrine-bundle": "^1.12.6",
    "dompdf/dompdf": "^0.8.2",
    "fervo/enum-bundle": "^2.2",
    "friendsofsymfony/jsrouting-bundle": "^2.1",
    "friendsofsymfony/rest-bundle": "^2.0",
    "friendsofsymfony/user-bundle": "^2.1.2",
    "knplabs/knp-snappy-bundle": "^1.5",
    "lexik/jwt-authentication-bundle": "^2.6",
    "nelmio/api-doc-bundle": "^3.6",
    "phpoffice/phpword": "^0.14.0",
    "predis/predis": "^1.1",
    "sc0vu/web3.php": "dev-master",
    "sensio/framework-extra-bundle": "^5.1",
    "sg/datatablesbundle": "v1.0.4",
    "simplethings/entity-audit-bundle": "^1.0",
    "snc/redis-bundle": "^2.0",
    "sonata-project/admin-bundle": "^3.49",
    "sonata-project/doctrine-orm-admin-bundle": "^3.4",
    "sonata-project/easy-extends-bundle": "^2.5",
    "sonata-project/user-bundle": "^4.1",
    "symfony/asset": "^4.0",
    "symfony/console": "^4.0",
    "symfony/debug-pack": "*",
    "symfony/expression-language": "^4.0",
    "symfony/flex": "v1.1",
    "symfony/form": "^4.0",
    "symfony/framework-bundle": "^4.0",
    "symfony/monolog-bundle": "^3.1",
    "symfony/orm-pack": "^1.0",
    "symfony/process": "^4.0",
    "symfony/security": "^4.0",
    "symfony/security-bundle": "^4.0",
    "symfony/security-csrf": "^v4.0",
    "symfony/serializer-pack": "*",
    "symfony/swiftmailer-bundle": "^3.1",
    "symfony/translation": "^4.0",
    "symfony/validator": "^4.0",
    "symfony/web-link": "^4.0",
    "symfony/webpack-encore-pack": "^1.0",
    "symfony/yaml": "^4.0",
    "twilio/sdk": "^5.0",
    "web3p/ethereum-tx": "^0.3.4",
    "willdurand/js-translation-bundle": "2.6.6"
  },
  "require-dev": {
    "ext-json": "*",
    "behat/symfony2-extension": "^2.1.5",
    "doctrine/data-fixtures": "^1.3",
    "hautelook/alice-bundle": "^2.0",
    "phpmd/phpmd": "^2.6",
    "phpstan/phpstan": "^0.10.6",
    "squizlabs/php_codesniffer": "^3.3",
    "symfony/browser-kit": "^4.0",
    "symfony/css-selector": "^4.0",
    "symfony/dotenv": "^4.0",
    "symfony/maker-bundle": "^1.0",
    "symfony/phpunit-bridge": "~4.3.0",
    "symfony/profiler-pack": "*",
    "zitec/behat-extension": "dev-master@dev"
  },
  "config": {
    "preferred-install": {
      "*": "dist"
    },
    "sort-packages": true
  },
  "autoload": {
    "psr-4": {
      "App\\": "src/"
    }
  },
  "autoload-dev": {
    "psr-4": {
      "App\\Tests\\": ["tests/functional", "test/unit", "tests/api"]
    }
  },
  "replace": {
    "symfony/polyfill-iconv": "*",
    "symfony/polyfill-php71": "*",
    "symfony/polyfill-php70": "*",
    "symfony/polyfill-php56": "*"
  },
  "scripts": {
    "auto-scripts": {
      "cache:clear": "symfony-cmd",
      "cache:warmup": "symfony-cmd",
      "assets:install --symlink --relative %PUBLIC_DIR%": "symfony-cmd"
    },
    "post-install-cmd": [
      "@auto-scripts"
    ],
    "post-update-cmd": [
      "@auto-scripts"
    ]
  },
  "conflict": {
    "symfony/symfony": "*"
  },
  "extra": {
    "symfony": {
      "id": "04C3GOB2A6BKEGTJ93E6RLD8R5",
      "allow-contrib": true
    }
  }
}

我的作曲版本是1.10.22

编写器更新--vvv

在以下行之后冻结：

Downloading http://repo.packagist.org/p/athletic/athletic%247c468034c468fcf26e08cb4c4e42c29c6058991f243753f391bf4be1a93476f1.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-athletic$athletic.json into cache
Downloading http://repo.packagist.org/p/laminas/laminas-stdlib%243063fe25485f2f11f7dcdae0d6592d8c4740bd0e4c6fbf5fac7141542cc10d34.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-laminas$laminas-stdlib.json into cache
Downloading http://repo.packagist.org/p/zendframework/zend-hydrator%24929a25c4d947fc57e2c18901b036ca54a167be6e1ac3b7a7ebc22757a91784a3.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-zendframework$zend-hydrator.json into cache
Downloading http://repo.packagist.org/p/laminas/laminas-hydrator%24a55a80ba78a25b92b6156070846ea5bcd90dfa7fc7c51c707f62695d865e56ab.json
Writing /root/.composer/cache/repo/https---repo.packagist.org/provider-laminas$laminas-hydrator.json into cache

---

有没有人知道是什么原因造成的，或者我可以试试别的什么？非常感谢

如中所述：这看起来像是两年多以前的

symfony/flex

中的代码。如果运行

composer update symfony/flex会发生什么情况？如果运行composer update symfony/flex，它将在我粘贴到上面的行（最后一个代码块）之后永远挂起。您尝试了什么解决问题？您使用的是哪个PHP版本？您是否尝试过使用Composer v2？我使用的是PHP7.2.34，我尝试过删除整个供应商文件夹，然后使用symfony/flex v1.12.2或更高版本。没用。我尝试升级到Composer 2-它告诉我需要升级我的包，因为有些包不兼容，然后当我尝试运行更新时，它又挂起了。。。