Signature fail with packagist

[swayoleg]

The contents of https://packagist.org/p/provider-latest%240cbfb40ab72a881d21b70f78286d39cd72e3b0eb8704c13e79dc49624e549973.json do not match its signature. This should indicate a man-in-the-middle attack. Try running composer again and report this if you think it is a mistake.

Repository configured like this

"repositories": {
"magento2-configscopehints": {
"type": "git",
"url": "https://github.com/ericthehacker/magento2-configscopehints.git"
}
}

Tested from 2 different servers, with clean composer project and m2 project.

OS: Ubuntu 16.04
php -v: PHP 7.0.18-0ubuntu0.16.10.1 (cli) ( NTS )

[hostep]

@swayoleg: since this module isn't being hosted on packagist (as far as I can see), the problem you are experiencing is probably not related to this module. What makes you think it was this module which is responsible for throwing that error?

[swayoleg]

@hostep previously it was ok to install it with instruction from section
"Composer Installation"
Now it's not.

So, can you please confirm that your "Composer Installation" instructions are working?
Thanks.

[hostep]

Sure, no problem over here, tested on some Magento 2.2.2 project:

$ composer config repositories.magento2-configscopehints git https://github.com/ericthehacker/magento2-configscopehints.git

$ composer require ericthehacker/magento2-configscopehints
Using version ^3.1 for ericthehacker/magento2-configscopehints
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Package operations: 1 install, 0 updates, 0 removals
  - Installing ericthehacker/magento2-configscopehints (3.1.1): Cloning 56a04e7af5 from cache
Package sjparkinson/static-review is abandoned, you should avoid using it. Use phpro/grumphp instead.
Writing lock file
Generating optimized autoload files

(btw, this isn't my module, so not my instructions, but they seem to work perfectly fine :))

[swayoleg]

Ok will try with magento composer project together now