Root composer.json requires firebase/php-jwt ^6.10.0 (v2025)

PHPMaker General Discussion (PHPMaker)
1

Hi,

When I generate a PHPMaker 2025 project, I get the following error. How to fix it?

Running composer update -n --no-audit --ansi...
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.
Problem 1

  • Root composer.json requires firebase/php-jwt ^6.10.0, found firebase/php-jwt[v6.10.0, ..., v6.11.1] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-y2cr-5h3j-g3ys") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
    node:internal/errors:998

Anuradha

3

I found a solution. In PHPMaker 2025, I went to C:\Users\anuradha\AppData\Roaming\phpmaker2025\node_modules@phpmaker\php2025 and manually updated composer.json. It worked for me. Please try it for v2024.

Screenshot 2026-02-21 105922
Screenshot 2026-02-21 1059221704×982 68.5 KB

4

But it has created another issue with key size, “Provided key is too short”. I do not know how to fix it.

6

In older versions (< v2026), firebase/php-jwt is used by JWT (REST API). If you check packagist.org, you'll see that all versions < v7 has security issues, so you need to upgrade to v7.

To change the versions, you can use Tools -> Composer Packages to add "firebase/php-jwt" and set the version as "v7.0.0".

  1. Read v7.0.0. release note. It added key size validation.
  2. You better check your JWT signing secret key and see if it is empty or too short. If yes, enter a key with sufficient length.