composer.json中的secure-http标志不起作用

Question

我需要为几个包使用http composer注册表:

...
"repositories":[
  {"type":"composer", "url":"http://<url>"}
],
"secure-http":false,
...

但是当我试图composer update更新锁定文件时,我得到了:

[Composer\Downloader\TransportException]
Your configuration does not allow connection to http://<url>.
See https://getcomposer.org/doc/06-config.md#secure-http for details.

通过回复网址,我找到了下一个信息;

secure-http#

Defaults to true. 
If set to true only HTTPS URLs are allowed to be downloaded via Composer. 
If you really absolutely need HTTP access to something then you can disable it ...

所以我很困惑我做错了什么.

Answer 1

错误的composer.json结构.secure-http必须在以下config部分:

{
  ...,
  "config":{
    ...,
    "secure-http":false,
    ...
  }
  ...
}