Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires symfony/cache ^4.3, found symfony/cache[v4.3.0, ..., v4.4.48] but these were not loaded, because they are affected by security advisories ("PKSA-z7t6-zt6p-wtng", "PKSA-w17b-j6zx-knvn"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false. Problem 2 - Root composer.json requires thecodingmachine/graphqlite @dev -> satisfiable by thecodingmachine/graphqlite[dev-63a7aadc3eadd8d81e244687cab356fd1d73ba92]. - thecodingmachine/graphqlite dev-63a7aadc3eadd8d81e244687cab356fd1d73ba92 requires symfony/cache ^4.3 || ^5 || ^6 || ^7 || ^8 -> found symfony/cache[v4.3.0, ..., v4.4.48, v5.0.0, ..., v5.4.53, v6.0.0, ..., v6.4.41, v7.0.0, ..., v7.4.13, v8.0.0, ..., v8.1.0] but these were not loaded, because they are affected by security advisories ("PKSA-z7t6-zt6p-wtng", "PKSA-w17b-j6zx-knvn"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.