ability to proceed without kwivix/flexinline dep in the main project

[drzraf]

I wonder whether it could be possible to make kwivix/flexinline work if it'd be dependency of the sole bundle rather than a main-project dependency.

[kwivix]

That would result in unexpected behaviour: if a (indirect) dependency of the main project adds flexinline as dependency a configurator could suddenly alter the main project config. The second is for security reasons. The ComposerScriptsConfigurator adds the ability to execute commands when composer runs.

[drzraf]

ok. I wrongly believed that https://github.com/covex-nn/extra-flex was able to do that. It seems that it can't either.

[drzraf]

I also wonder, for main packages suggesting flexinline-enabled bundles.
What happens if one require the bundle before having require flexinline?