README

⚠️ This is a test fixture, not a real library. Do not depend on it.

A deliberately trivial Composer package owned by GMO Flatt Security, used as a blocklist canary for Takumi Guard's Composer (Packagist) registry proxy at packagist.flatt.tech.

Why this exists

Takumi Guard blocks known-malicious packages at the registry-proxy layer. To verify that the block path works end-to-end in a real environment — without ever touching a real package that a customer might legitimately depend on — we keep this package permanently on the Guard blocklist and assert that resolving it through the proxy is rejected.

Because the blocklist gate runs before any upstream fetch, this package does not need to be published to packagist.org for the test to be meaningful: a composer require flatt-security/hola-takumi-php routed through packagist.flatt.tech returns HTTP 403 at metadata resolution time.

Expected behavior

If this package ever resolves successfully through the proxy, the Guard blocklist path has regressed.

Repository status

Internal. This repository is intentionally not published and carries no support guarantees.