Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires league/commonmark ^1.6, found league/commonmark[1.6.0, ..., 1.6.7] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-rqc2-tcc6-nc79", "PKSA-fndg-qryc-dyc9") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. Problem 2 - Root composer.json requires quantum/framework dev-master -> satisfiable by quantum/framework[dev-master]. - quantum/framework dev-master requires twig/twig ^2.7 -> found twig/twig[v2.7.0, ..., v2.16.1] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-yhcn-xrg3-68b1", "PKSA-2wrf-1xmk-1pky") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.