This project should support composer create-project so new projects can be requisitioned in a fashion that does not require cloning this repository.

• Support composer create-project. This would look like composer create-project lpeabody/metis-project my-new-project.

What are some approaches used by other starter Drupal projects?

• Acquia BLT uses subtrees (see https://github.com/acquia/blt/tree/11.x/subtree-splits/blt-project)

Description

Configure the starter site to "support CCPA and GDPR" OOTB.

• What would supporting these laws look like from a Drupal perspective?
• What are the minimum requirements for supporting these laws?

Update BLT to latest version and use blt recipes:scaffold:migrate to move from Drupal Scaffold to Composer Scaffold.

Add a behat test for verifying that the Test Person Profile page content is associated with the Person schema and has valid attributes.

Easy enough just to turn modules on but I'm unsure of what the best Solr version to support is at this point, that's the main question here.

There needs to be some semblance of a security audit scan that gets run on the codebase. On top of integration tests, part of the security effort should be to leverage static analysis tools.

• What is the current best practice for Drupal 8 as it pertains to security scans via static analysis?
• How does that apply and provide use to this project?

Examples:

• Acquia BLT uses Acquia's ORCA tool (https://github.com/acquia/orca) though there doesn't seem to be a specific focus on security.