Packagist

Nils Adermann wearing a blue Private Packagist hoodie and yellow Private Packagist t-shirt on stage next to a lectern pointing at a slide, photographed across backs of audience heads.

Laracon EU audience facing the stage

Nils Adermann taking a selfie from the balcony above the Laracon EU crowd with Nuno Maduro on a large screen talking to the audience.

Sign with community sponsor logos at Laracon EU Amsterdam including Private Packagist

Loved the very engaged audience of a thousand people at #LaraconEU 2026 in Amsterdam today at my "Composer Deep Dive" talk! Proud to sponsor the event with Private Packagist /
@packagist.com - Find me and chat about package management or @thephpf.bsky.social! #laravel #laracon #php #composerphp

Just arrived in Amsterdam for #LaraconEU - my talk "Composer Deep Dive" is tomorrow afternoon at 2:30pm! Hope to talk to as many of you about #composerphp @packagist.com and @thephpf.bsky.social ! #laravel #php

What's New in Private Packagist, February 2026 Update Private Packagist has continued to evolve over the past three months with significant improvements to authentication flows, security hardening, and notification capabilities. Here are the highlights f...

🚀 Private Packagist February update: Redesigned login flow, team member MFA resets for org owners, new Microsoft Teams Workflow notifications (old connectors deprecated), clickable composer search URLs in your terminal blog.packagist.com/whats-new-in... #composerphp #php #phpc

Proud to announce we just renewed our annual $18,000 sponsorship for the The PHP Foundation!

Check out this summary on the work completed in 2025. So much more could be accomplished, if all businesses using PHP contributed. Sign up as a sponsor and help moving PHP forward!

Nils Adermann in yellow Private Packagist t-shirt and blue hoodie presenting in front of a crowd at SymfonyCon Amsterdam 2025.

Nils Adermann presenting on 2FA enforcement in package manager ecosystems in front of a crowd at SymfonyCon Amsterdam 2025.

Nils Adermann presenting at SymfonyCon Amsterdam 2025 on stage, discussing the npm Shai-Hulud Worm security incident. The slide shows details of the November 2024 supply chain attack that compromised 700+ packages and exposed credentials from 26k+ repositories through GitHub Actions code injection.

Conference attendees gathered around the Private Packagist booth at SymfonyCon Amsterdam 2025 having discussions.

Back from our annual #SymfonyCon trip! Great experience celebrating 20 years of #Symfony with its community in Amsterdam. The @packagist.com booth was busy throughout the event, and my package manager security outlook talk sparked good conversations. See you in Warsaw 2026! #php #composerphp

💥 Shoutout to our Gold Sponsor: @PrivatePackagist! 🥇
Thanks for fueling innovation and supporting #SymfonyCon Amsterdam 2025! 🚀💛

👏 You rock!

#PHP #Symfony #Sponsor

In Amsterdam next week and part of a group underrepresented at tech confs, or can't afford a ticket? Private Packagist is sponsoring #SymfonyCon (Nov 27th/28th) and we have a ticket to give away: Reply your favorite PHP8.5 feature to win #php #phpc #symfony @symfony.com

And now @packagist.com 🔥

Thank you so much for sponsoring my work and placing trust in my humble contribution to the PHP ecosystem! 🙏

What’s New in Private Packagist, November Update We've shipped several important updates to Private Packagist over the past three months, including more insights on the package usage tracking page, the introduction of Trusted Publishing for secure a...

New in Private Packagist: Usage Tracking can now help prioritize security updates by showing how deps cascade through projects and where vulnerable versions are used. Trusted Publishing for GitHub Actions and better synchronization setup. blog.packagist.com/whats-new-in... #php #phpc #composerphp

Strengthening PHP Supply Chain Security with a Transparency Log for Packagist.org The release of Composer 2.9 this week introduced new security features on the Composer CLI client, which were funded by Private Packagist through service subscriptions. But in parallel, we are working...

After Composer 2.9 CLI security improvements, we're working on a transparency log for Packagist to strengthen PHP supply chain security, funded by the @sovereign.tech with help of the @thephpf.bsky.social and Private Packagist. Details at blog.packagist.com/strengthenin... #php #phpc #composerphp

Composer 2.9 Release We are pleased to announce the release of Composer 2.9.0, bringing improvements to security, repository management from the CLI, and lots more. Automatic Security Blocking Composer now automaticall...

Composer 2.9 is here! 🚀 It automatically blocks packages with known vulnerabilities, has a new repository command to manage repos from the CLI, and lots more!

blog.packagist.com/composer-2-9/
#composerphp #phpc #PHP

The PHP Foundation is Seeking a New Executive Director The PHP Foundation — Supporting, Advancing, and Developing the PHP Language

The PHP Foundation is Seeking a New Executive Director! 🐘💜

We're asking the PHP community to help find the right person for this role. If you know someone who would be an excellent fit, please encourage them to apply or reach out to us directly.

thephp.foundation/blog/2025/11... #phpc #php

Release 2.9.0-RC1 · composer/composer Composer 2.9 is ready for a release, and we need your help to test it and report any regression. Please try it out! Running composer self-update --preview will get you the 2.9.0-RC1 Running compos...

Composer 2.9 is coming, and there's an RC to try out! We need your help and feedback github.com/composer/com... #composerphp #phpc

Bitbucket deprecated App Passwords Bitbucket announced that they deprecated app passwords in favor of their new API token system. This change affects organizations using Private Packagist with Bitbucket Cloud (bitbucket.org) workspace ...

Bitbucket Cloud is retiring app passwords in favor of API tokens. If you're using Private Packagist with Bitbucket Cloud, migrate now to avoid future disruptions.

Our blog post explains it step-by-step: blog.packagist.com/bitbucket-de...

#php #composerphp #phpc #privatepackagist #bitbucket

A Call for Sustainable Open Source Infrastructure Today, we joined other major package registries in signing an important joint statement on sustainable stewardship of open source infrastructure. Together with Maven Central, PyPI, crates.io, Open VSX...

Here's our blog post on the statement: blog.packagist.com/a-call-for-s...

Together with PyPI, Maven Central, cratesio and other major package registries we signed a statement on sustainable open source infrastructure.
3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs.
#phpc #php

🚨 Warning to #PHP package maintainers: We did not email you to change your passwords & 2FA. Emails asking you to update your credentials are a phishing attempt. We had the phishing site & domain taken down. If you got the email and entered your credentials, please contact us. #phpc

Thank you @packagist.com for supporting the #APIPlatformCon 2025!

🚨 PSA for #PHP package maintainers: DO NOT REPLACE tags! If you messed up a release simply do another. No matter how quickly you notice a mistake, automatic tools already pulled the original tag, triggered automatic updates. Users will never know you recreated the tag and use the broken state. #phpc

Nils Adermann behind a lectern on stage at API PlatformCon receiving a birthday cake while the audience claps. The slide on stage asks "Questions / Feedback?" and points to Private Packagist.

Had a great time presenting Composer Best Practices for 2025 at #APIPlatformCon in Lille this morning. Meet me at our booth, I'd love to hear all about how you work with #composerphp! #php #phpc #supplychainsecurity #symfony #apiplatform

We'll pick winners by the end of the week and look forward to seeing you at our booth in Lille!

Badge saying API Platform Conference 2025, Lille (France) & Online - Private Packagist is a wonderful Silver Sponsor and the Private Packagist elephant logo is shown on the right.

Would you like to attend #APIPlatformCon 2025 in Lille on Sep 18/19 or online? Private Packagist is sponsoring: 4 tickets to give away! Part of a group underrepresented at tech conferences, or can't afford a ticket? Repost and reply favorite PHP package(s) #php #composerphp #phpc

The era of Composer v1 finally comes to an end, long live Composer v2! 👑 Today packagist.org support for v1 metadata has been shut down as announced last year. blog.packagist.com/packagist-or... #composerphp #phpc #php

What’s New in Private Packagist, August Update We've been busy improving Private Packagist over the past few months with a focus on package discovery, user experience improvements, and improved security monitoring tools. Here are the most signific...

August update: dependency usage tracking across your packages, automatic GitLab token rotation, and Conductor improvements with custom labels and smarter PR handling blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

Arrived in Denver for #Laracon - look forward to meeting everyone at our @packagist.com booth! Would love to talk to everyone about how you use Composer, handle updates and apply security patches, or anything else relating to dependency management! #laraconus #laravel #phpc

Packagist.org shutdown of Composer 1.x support postponed to September 1st, 2025 With the deadline drawing near, we’d like to remind you that we are discontinuing Composer 1.x support on Packagist.org soon. We're extending our original timeline by one month to give teams additiona...

🚨 Packagist.org shutdown of Composer 1.x support postponed to September 1st, 2025. Act now, upgrade to Composer 2! Last resort: check out Private Packagist extended 1.x support if you really cannot migrate right now. blog.packagist.com/packagist-or...

Igor Benko and Nils Adermann in Private Packagist T-shirts in front of a Private Packagist booth

Meet @igorbenko.bsky.social and me at IPC in Berlin today & tomorrow at our @packagist.com booth. 👋 Would love to chat about Composer, supply chain security, dependencies, or show you our new tool Conductor! Don't forget to pick up a Composer sticker 😉

#php #phpc #composerphp #ipc #ipc2025

AmsterdamPHP Special PHPVerse Edition, Tue, Jun 17, 2025, 6:30 PM | Meetup **🎉 Special AmsterdamPHP Meetup – June 17th, 2025** Right after **[PHPVerse 2025](https://lp.jetbrains.com/phpverse-2025/)**, we’re keeping the momentum going with two of

Will you be in Amsterdam June 17th, or can you make it there? Join us to celebrate PHP turning 30 after #phpverse at Café Restaurant Dauphine with @amsterdamphp.bsky.social from 6:30pm - RSVP www.meetup.com/amsterdamphp... #php #phpc

Really excited sponsor LaraconUS with @packagist.com - So exciting to see the @laravel.com team really pushing the entire Laravel ecosystem forward and everyone in the Laravel community advancing #PHP! Get a ticket while they're discounted and meet us at our booth in Denver in July!