# Stable Dependency Analyzer

Category Severity Time To Fix
🛡️ Security Major 1 minute

Class: Enlightn\Enlightn\Analyzers\Security\StableDependencyAnalyzer

# Introduction

This analyzer checks whether your application uses stable versions of dependencies.

If your application is using a version lower than the most stable version (within the same major version) of your dependencies, then you may be missing some bug fixes and/or security patches that may be included with the most stable release.

Similarly, if your application is using an unstable version such as an early or beta release, then the release may be susceptible to security vulnerabilities or unknown bugs.

# How To Fix

To update to the most stable release, run the composer update command with the --prefer-stable flag:

composer update --prefer-stable

TIP

It is not recommended to run a composer update command on your production servers. Instead, run the above command in a local environment and commit the composer.lock file.

# References