{"action":"created","issue":{"url":"https://api.github.com/repos/composer/composer/issues/5121","repository_url":"https://api.github.com/repos/composer/composer","labels_url":"https://api.github.com/repos/composer/composer/issues/5121/labels{/name}","comments_url":"https://api.github.com/repos/composer/composer/issues/5121/comments","events_url":"https://api.github.com/repos/composer/composer/issues/5121/events","html_url":"https://github.com/composer/composer/issues/5121","id":143848942,"number":5121,"title":"Implement --allow-insecure-registry option for create-project and install commands","user":{"login":"prometheas","id":185966,"avatar_url":"https://avatars.githubusercontent.com/u/185966?v=3","gravatar_id":"","url":"https://api.github.com/users/prometheas","html_url":"https://github.com/prometheas","followers_url":"https://api.github.com/users/prometheas/followers","following_url":"https://api.github.com/users/prometheas/following{/other_user}","gists_url":"https://api.github.com/users/prometheas/gists{/gist_id}","starred_url":"https://api.github.com/users/prometheas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/prometheas/subscriptions","organizations_url":"https://api.github.com/users/prometheas/orgs","repos_url":"https://api.github.com/users/prometheas/repos","events_url":"https://api.github.com/users/prometheas/events{/privacy}","received_events_url":"https://api.github.com/users/prometheas/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-03-27T21:16:33Z","updated_at":"2016-04-02T16:07:04Z","closed_at":"2016-04-02T13:50:40Z","body":"I know it's possible to use `composer config -g secure-http false`, but that's too easy to set and forget. I believe it's worth supporting a `--allow-insecure-registry` option for `create-project` and `install` so that the permissive setting can be directed at very specific commands.\r\n\r\nExample:\r\n\r\n```sh\r\n$ composer install my/project --allow-insecure-registry http://packagist.example.com\r\n```\r\n\r\nNote: this idea is borrowed from the `docker-machine` command."},"comment":{"url":"https://api.github.com/repos/composer/composer/issues/comments/204746181","html_url":"https://github.com/composer/composer/issues/5121#issuecomment-204746181","issue_url":"https://api.github.com/repos/composer/composer/issues/5121","id":204746181,"user":{"login":"prometheas","id":185966,"avatar_url":"https://avatars.githubusercontent.com/u/185966?v=3","gravatar_id":"","url":"https://api.github.com/users/prometheas","html_url":"https://github.com/prometheas","followers_url":"https://api.github.com/users/prometheas/followers","following_url":"https://api.github.com/users/prometheas/following{/other_user}","gists_url":"https://api.github.com/users/prometheas/gists{/gist_id}","starred_url":"https://api.github.com/users/prometheas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/prometheas/subscriptions","organizations_url":"https://api.github.com/users/prometheas/orgs","repos_url":"https://api.github.com/users/prometheas/repos","events_url":"https://api.github.com/users/prometheas/events{/privacy}","received_events_url":"https://api.github.com/users/prometheas/received_events","type":"User","site_admin":false},"created_at":"2016-04-02T16:07:03Z","updated_at":"2016-04-02T16:07:03Z","body":"The other ticket is a conversation about obstacles, this is a specific recommendation (which may be rejected for any number of reasons, obviously), which seeks to solve for the problem discussed there.\n\nTrouble is, setting `secure-http` to `false` in the `config` key of a `composer.json` file aids in dependency installation, but composer declines to even hit an insecure registry URL to begin with on a `create-project` run."}}