And thats called insta-deny, which requires unneeded work for a extensions teammember.RMcGirr83 wrote:@Paul I disagree. EPV is already run when submitting to the CDB plus I have run into issues with false positives using EPV and travis in the past (can't find it now naturally).
Yes, there are already extensions approved with it included. Also, it is in require-dev, so if you run composer without requiring dev dependencies, it is not in included anyways.Only things that should be "required" would be the license and the type. If an extension writer wants to include EPV when testing on travis that would require a check on the yes box. Are you going to allow extension writers, if using dependencies, to include the EPV stuff within their extension when submitted to the CDB after they compiled it using composer? I highly doubt it.