#composerphp

2 weeks ago

Just arrived in Amsterdam for #LaraconEU - my talk "Composer Deep Dive" is tomorrow afternoon at 2:30pm! Hope to talk to as many of you about #composerphp @packagist.com and @thephpf.bsky.social ! #laravel #php

7 1 2 0

2 weeks ago

Full audience at the c-base for the Symfony Usergroup Berlin Opening

Excited to speak at #symfony user group Berlin tonight! #sfugberlin #composerphp

5 0 0 0

What's New in Private Packagist, February 2026 Update Private Packagist has continued to evolve over the past three months with significant improvements to authentication flows, security hardening, and notification capabilities. Here are the highlights f...

1 month ago

🚀 Private Packagist February update: Redesigned login flow, team member MFA resets for org owners, new Microsoft Teams Workflow notifications (old connectors deprecated), clickable composer search URLs in your terminal blog.packagist.com/whats-new-in... #composerphp #php #phpc

5 3 0 0

3 months ago

Nils Adermann in yellow Private Packagist t-shirt and blue hoodie presenting in front of a crowd at SymfonyCon Amsterdam 2025.

Nils Adermann presenting on 2FA enforcement in package manager ecosystems in front of a crowd at SymfonyCon Amsterdam 2025.

Nils Adermann presenting at SymfonyCon Amsterdam 2025 on stage, discussing the npm Shai-Hulud Worm security incident. The slide shows details of the November 2024 supply chain attack that compromised 700+ packages and exposed credentials from 26k+ repositories through GitHub Actions code injection.

Conference attendees gathered around the Private Packagist booth at SymfonyCon Amsterdam 2025 having discussions.

Back from our annual #SymfonyCon trip! Great experience celebrating 20 years of #Symfony with its community in Amsterdam. The @packagist.com booth was busy throughout the event, and my package manager security outlook talk sparked good conversations. See you in Warsaw 2026! #php #composerphp

9 3 1 0

What’s New in Private Packagist, November Update We've shipped several important updates to Private Packagist over the past three months, including more insights on the package usage tracking page, the introduction of Trusted Publishing for secure a...

3 months ago

New in Private Packagist: Usage Tracking can now help prioritize security updates by showing how deps cascade through projects and where vulnerable versions are used. Trusted Publishing for GitHub Actions and better synchronization setup. blog.packagist.com/whats-new-in... #php #phpc #composerphp

2 3 0 0

Strengthening PHP Supply Chain Security with a Transparency Log for Packagist.org The release of Composer 2.9 this week introduced new security features on the Composer CLI client, which were funded by Private Packagist through service subscriptions. But in parallel, we are working...

4 months ago

After Composer 2.9 CLI security improvements, we're working on a transparency log for Packagist to strengthen PHP supply chain security, funded by the @sovereign.tech with help of the @thephpf.bsky.social and Private Packagist. Details at blog.packagist.com/strengthenin... #php #phpc #composerphp

17 7 0 0

Jordi Boggiano

@seld.be

4 months ago

Composer 2.9 Release We are pleased to announce the release of Composer 2.9.0, bringing improvements to security, repository management from the CLI, and lots more. Automatic Security Blocking Composer now automaticall...

Composer 2.9 is here! 🚀 It automatically blocks packages with known vulnerabilities, has a new repository command to manage repos from the CLI, and lots more!

blog.packagist.com/composer-2-9/
#composerphp #phpc #PHP

14 8 0 0

Jordi Boggiano

@seld.be

4 months ago

Release 2.9.0-RC1 · composer/composer Composer 2.9 is ready for a release, and we need your help to test it and report any regression. Please try it out! Running composer self-update --preview will get you the 2.9.0-RC1 Running compos...

Composer 2.9 is coming, and there's an RC to try out! We need your help and feedback github.com/composer/com... #composerphp #phpc

6 4 0 0

Bitbucket deprecated App Passwords Bitbucket announced that they deprecated app passwords in favor of their new API token system. This change affects organizations using Private Packagist with Bitbucket Cloud (bitbucket.org) workspace ...

5 months ago

Bitbucket Cloud is retiring app passwords in favor of API tokens. If you're using Private Packagist with Bitbucket Cloud, migrate now to avoid future disruptions.

Our blog post explains it step-by-step: blog.packagist.com/bitbucket-de...

#php #composerphp #phpc #privatepackagist #bitbucket

0 2 0 0

Marcus Jaschen

@mjaschen.mastodon.social.ap.brid.gy

5 months ago

Original post on mastodon.social

Caching in CI/CD sollte eingesetzt werden, wann immer es geht.

Das hilft nicht nur, die Infrastrukturkosten niedrig zu halten, sondern verkürzt auch eigenen Build-Zeiten mitunter erheblich.

Für GitHub-/Gitea-kompatible Workflows gibt es actions/cache, welches trivial einzurichten ist […]

0 0 0 0

5 months ago

Together with PyPI, Maven Central, cratesio and other major package registries we signed a statement on sustainable open source infrastructure.
3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs.
#phpc #php

16 8 1 1

5 months ago

Nils Adermann behind a lectern on stage at API PlatformCon receiving a birthday cake while the audience claps. The slide on stage asks "Questions / Feedback?" and points to Private Packagist.

Had a great time presenting Composer Best Practices for 2025 at #APIPlatformCon in Lille this morning. Meet me at our booth, I'd love to hear all about how you work with #composerphp! #php #phpc #supplychainsecurity #symfony #apiplatform

5 1 1 0

6 months ago

Badge saying API Platform Conference 2025, Lille (France) & Online - Private Packagist is a wonderful Silver Sponsor and the Private Packagist elephant logo is shown on the right.

Would you like to attend #APIPlatformCon 2025 in Lille on Sep 18/19 or online? Private Packagist is sponsoring: 4 tickets to give away! Part of a group underrepresented at tech conferences, or can't afford a ticket? Repost and reply favorite PHP package(s) #php #composerphp #phpc

4 5 1 0

Packagist The PHP Package Repository

6 months ago

The era of Composer v1 finally comes to an end, long live Composer v2! 👑 Today packagist.org support for v1 metadata has been shut down as announced last year. blog.packagist.com/packagist-or... #composerphp #phpc #php

11 6 1 0

What’s New in Private Packagist, August Update We've been busy improving Private Packagist over the past few months with a focus on package discovery, user experience improvements, and improved security monitoring tools. Here are the most signific...

6 months ago

August update: dependency usage tracking across your packages, automatic GitLab token rotation, and Conductor improvements with custom labels and smarter PR handling blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

2 3 0 0

CrownCloud - Internet Services

9 months ago

Igor Benko and Nils Adermann in Private Packagist T-shirts in front of a Private Packagist booth

Meet @igorbenko.bsky.social and me at IPC in Berlin today & tomorrow at our @packagist.com booth. 👋 Would love to chat about Composer, supply chain security, dependencies, or show you our new tool Conductor! Don't forget to pick up a Composer sticker 😉

#php #phpc #composerphp #ipc #ipc2025

6 3 0 0

@crowncloud.bsky.social

9 months ago

How To Install Composer On CentOS Stream 10 Light

Streamline your PHP workflow!

Learn how to install #Composer on #CentOS Stream 10 – the go-to dependency manager for modern #PHP development.

wiki.crowncloud.net?How_to_Insta...

#LinuxTips #CentOSStream #ComposerPHP #WebDevelopment #OpenSource #DevOps #SysAdmin #PHPTools

1 0 0 0

CrownCloud - Internet Services

@crowncloud.bsky.social

9 months ago

How To Install PHP Composer On Ubuntu 20 04 Light

Manage PHP dependencies like a pro!

Learn how to install #Composer on #Ubuntu 20.04 — the essential tool for modern PHP development.

wiki.crowncloud.net?How_to_Insta...

#LinuxTips #PHPTools #Ubuntu2004 #WebDevelopment #OpenSource #ComposerPHP #DevOps #SysAdmin

1 0 0 0

What’s New in Private Packagist, May Update Private Packagist has been evolving steadily over the past three months with a focus on API improvements, enhanced security, and refined user experience. Let's dive into the significant updates that h...

10 months ago

May update: Progress on Conductor, expiring API credentials, stronger account protection, improved user profile/settings UX & performance boosts! Details: blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

4 2 0 0

11 months ago

Nils Adermann standing on a stage next to a podium and in front of a large screen saying "Composer Guide to Supply Chain Security" with a Packagist elephant logo and a Composer logo

Was a pleasure to speak at @symfony.com Live Berlin last week, here are the slides for my talks "Composer Guide to Supply Chain Security" naderman.de/slippy/slide... and the lightening talk "composer.lock demystified" naderman.de/slippy/slide... #php #phpc #symfony #composerphp

7 1 1 0

1 year ago

Thanks for all the kind feedback on my supply chain security for #composerphp talk, was a great experience speaking at #phpuk - hope a lot of you sign up for Conductor and try it out when available!

#php #phpuk25

5 4 0 1

What’s New in Private Packagist, February Update While we’re also putting the final touches on Conductor, our team has shipped regular updates and improvements to Private Packagist. We’ll share some significant changes we've made to Private Packagis...

1 year ago

Our deploy pipeline never sleeps! Here are all the improvements to Private Packagist over the last months: We added support for PIE, streamlined our GitHub sync and made it easier to track your setup progress, more on our blog: blog.packagist.com/whats-new-in... #composerphp #composer #php #phpc

7 2 0 0

2.8 | Documentação do Composer | docs.dev.br

1 year ago

Going to give a talk on #composerphp internals at the #LaraconEU in conference at 2:20pm after lunch! Come join me for a quick look into architecture, boolean algebra and computational complexity theory! 😁 #laracon #laravel

7 1 1 0

docs.dev.br

@docs.dev.br

1 year ago

🚀 Ótimas notícias! A documentação do Composer 2.8 agora está disponível em português brasileiro! 🇧🇷

Confira: docs.dev.br/pt-br/docs/c...

@naderman.de @seld.be

#composerphp #docs #traducao #translation #ptbr #opensource

1 1 0 0

1 year ago

My slides for "Composer Behind the Scenes" at #SymfonyCon Vienna are now available. Useful if you want to try and follow my SAT solver examples since I lacked a laser pointer during the talk 😉 Thanks for all the positive feedback! ❤️ naderman.de/slippy/slide... #composerphp #php #phpc #symfony

4 1 0 0

1 year ago

Team photo in front of Symfony Logo

Meet our team at #SymfomyCon Vienna! We'd love to chat about how you manage your Composer dependencies, your questions around supply chain security, Private Packagist or our upcoming product Conductor! #symfony #php #composerphp

15 2 1 0

Conductor - Automatic dependency updates for Composer Automatic dependency updates for Composer - tailor made for PHP. Grouped and scheduled in ways that just make sense for PHP projects.

1 year ago

We're excited to introduce you to 🧑‍✈️Conductor! Automatic dependency update PRs with Composer for PHP projects - Security fixes patched in minutes - Continuous updates without the hassle - all running in your own CI env!

Early access waitlist: packagist.com/features/con...

#composerphp #php #phpc

42 19 2 2