{
    "require": {
        "dompdf/dompdf": "^3.1",
        "phpmailer/phpmailer": "^7.1",
        "google/apiclient": "^2.16"
    },
    "config": {
        "audit": {
            "ignore": {
                "GHSA-2x45-7fc3-mxwq": "Low-severity (CVSS 2.7) weak-encryption issue in firebase/php-jwt <7.0, pulled in transitively by google/apiclient. We only use it to sign our own outbound service-account JWTs (RS256, our own private key) for Google OAuth2 token exchange — we never parse or verify externally-supplied tokens, so this does not apply to our usage.",
                "PKSA-y2cr-5h3j-g3ys": "Same advisory as GHSA-2x45-7fc3-mxwq (Packagist's local advisory ID) — see that entry."
            }
        }
    }
}