SecurityAdvisories VS Goutte

To reduce the chance of introducing vulnerable dependencies into your projects, you can use tools such as "Roave Security Advisories" (roave/security-advisories).

In order to avoid accepting third-party code with well-known security issues you can take advantage of SecurityAdvisories by Roave, a library which uses conflict as shown in this article to block unsafe packages. Give it a look!

roave/security-advisories: Security advisories as a simple composer exclusion list, updated daily

Every composer user should use at least https://github.com/Roave/SecurityAdvisories

Look into Goutte (https://github.com/FriendsOfPHP/Goutte). It has a simple API and you can extract text/links with ease by targeting CSS selectors. I have used it for a similar task before, you should be done within a day, max 2.

But this process will fail if the source site changes. Its better to look at parsing HTML code instead if using sub-strings. There are some nice libraries like Goutte that can help you with scraping a site.

Without discussing if it’s right or wrong to keep a version of third party code that could break everthing (take a look at this PR), we were suddenly at a crossroads: drop the deps=low and give up on this kind of tests or dig in the Composer manual and look for something that could possibly help us: you guessed right, conflict is what we needed (thanks to jakzal!).

I recommend looking into something more modern like Goutte. The GitHub page has some documentation.