composer/composer
Stars: 27832
Forks: 6727
Pull Requests: 3817
Issues: 7452
Watchers: 598
Last Updated: 2023-09-15 07:58:26
Dependency Management for PHP
Composer helps you declare, manage, and install dependencies of PHP projects.
See https://getcomposer.org/ for more information and documentation.
Installation / Usage
Download and install Composer by following the official instructions.
For usage, see the documentation.
Packages
Find public packages on Packagist.org.
For private package hosting take a look at Private Packagist.
Community
Follow @packagist or @seldaek on Twitter for announcements, or check the #composerphp hashtag.
For support, Stack Overflow offers a good collection of Composer related questions, or you can use the GitHub discussions.
Please note that this project is released with a Contributor Code of Conduct. By participating in this project and its community you agree to abide by those terms.
Requirements
Latest Composer
PHP 7.2.5 or above for the latest version.
Composer 2.2 LTS (Long Term Support)
PHP versions 5.3.2 - 8.1 are still supported via the LTS releases of Composer (2.2.x). If you
run the installer or the self-update command the appropriate Composer version for your PHP
should be automatically selected.
Binary dependencies
7z(or7zz)unzip(if7zis missing)gziptarunrarxz- Git (
git) - Mercurial (
hg) - Fossil (
fossil) - Perforce (
p4) - Subversion (
svn)
It's important to note that the need for these binary dependencies may vary
depending on individual use cases. However, for most users, only 2 dependencies
are essential for Composer: 7z (or 7zz or unzip), and git.
Authors
- Nils Adermann | GitHub | Twitter | [email protected] | naderman.de
- Jordi Boggiano | GitHub | Twitter | [email protected] | seld.be
See also the list of contributors who participated in this project.
Security Reports
Please send any sensitive issue to [email protected]. Thanks!
License
Composer is licensed under the MIT License - see the LICENSE file for details.
Acknowledgments
- This project's Solver started out as a PHP port of openSUSE's Libzypp satsolver.
OPEN ISSUES
See all- local-global repositories (composer link command) by @fprochazka
- SHA1 sum of package dists should be more reliable than a SHA1 on the zip result by @Seldaek
- Add Support Cryptographic Signatures with Public Key Pinning by @sarciszewski
- Composer archive latest stable by @tschechniker
- composer stores vendor dir in `$XDG_CONFIG_HOME` by @jrobeson
- Generated code in autoload_real.php should be namespaced by @Firehed
- Handle unpushed branches (in vendor checkouts) more gracefully by @tractorcow
- [feature request] a link to github comparison on `outdated` command by @zerkms
- GitExcludeFilter is not conforming with gitignore spec by @backbone87
- Support checksum (sha256) verification in dist fields (for downloaded data) by @emanuelb
- Passing SIGINT to script process by @AdrianSkierniewski
- auto detect license from LICENSE file by @staabm
- Support strict (no ambiguous classes) mode for generating optimised autoloader by @acoulton
- NFS conflict with composer by @loiclavoie
- Experiment: External Dependency Solver by @lorenzleutgeb
- Default virtual package provider choices by @naderman
- RFC: Automatically resolve conflicts in composer.lock by @hkdobrev
- [Future] Code Signing and Enhanced Security Against Supply-Chain Attacks by @paragonie-scott
- Composer file could not be downloaded (404 not found) by @bepossitive
- composer update for a single package may be silently stopped by a dependency conflict by @giorgiosironi
- Feature Request: replaced-by key or ignore-if by @BackEndTea
- When setting config and unsettling config again, an empty config section still remains in composer.json by @7ochem
- JSON Schema for composer.lock file by @Majkl578
- [RFC] Allow ignoring local platform by @alcaeus
- Inconsistency in output of versions for 'show' command by @miguelrs
- Improved support for tar/bz2 and tar/gzip by @Seldaek
- Composer config --file option does not prevent prompt for using a parent dir's composer.json by @TerrePorter
- [Composer/Packagist.org] Mark package versions as being maintained by @Toflar
- Try and restore AsyncRepoInterface by @Seldaek
- Doc - Sorted By alphabetical command name by @TheGarious
- Use a dependency injection container by @szepeviktor
- Add the ability to use wildcards in bin configuration by @jackbentley
- Simplify learned rule display and improve odering of problem rules by @naderman
- Clean up the mess of different transaction classes by @naderman
- Rule::isCausedByLock by @naderman
- composer create-project doesn't correspond to the attributes set on parent directory by @marveloo
- Using "bearer" auth config with a self-hosted bitbucket instance by @loliee
- Allow plugins to override `DefaultPolicy` by @gmazzap
- parallel zip on windows by @staabm
- parallelize git clone by @staabm
- Contents of junctioned (path) repositories still deleted by @AndreKR
- [FEATURE REQUEST] Allow more granular minimum-stability by pattern by @adrian-martinez-interactiv4
- Add require-tools section and handle scoped vendor dirs by @nicolas-grekas
- [FEATURE] add support for inner .gitignore files by @rtm-ctrlz
- On securing Composer updates with The Update Framework (TUF) by @TravisCarden
- RFC: Reproducible vendor directory contents by @glensc
- Symlinked dir+file combo evades exclude-from-classmap by @crossbap
- On "staged" or atomic update operations by @TravisCarden
- Is it possible to get version 2 with alternative install methods? by @jasonday
- Adding repositories without name using config command by @grappler
- Add possibility to specify the path of an auth.json by @sippsolutions
- Large git clone timeouts even if it progresses by @mvorisek
- Composer 'permission denied' on Windows 7 by @papconst
- HgDownloader - clone fails with custom installation path (reincarnation of #2096) by @sb-relaxt-at
- Authorisation with Custom Headers in auth.json by @rlees85
- RFC: Add format option for validate command by @ishan-deepsource
- PHP 8.1 composer update fails with Segmentation fault (core dumped) by @HepplerDotNet
- Security Advisory Features by @naderman
- Composer 2.2 LTS, 2.3 PHP Version Support, 1.x Deprecation by @Seldaek
- Composer in crontab by @remco-pc
- Not composer issue but - integration composer.json & storeschema.org no json schema published by @error-500
- update .lock file to use new repository(mirror) by @guoard
- Third party application with multiple vendor folders by @sashi-geeks
- composer.phar is identified as threat by virustotal.com by @fame-oyten
- Timed URLs from redirects expire before a download is attempted. by @Nimdoc
- Clean up phpdoc @return annotation which duplicate the real return type if they are not adding any description by @Seldaek
- Can't find dll by @Friend0001
- Symlinks inside /vendor/bin/ get replaced with regular files by @pcapp2114
- `show --direct` but for a specific package rather than the root by @joachim-n
- segmentation fault composer --version under PHP8.1.4 by @Endy-c
- Specifying `--version` on the command line when installing doesn't install the specified version. by @bensebborn
- Docker Alpine Linux ARM Segmentation faults on all composer versions below "latest" version by @allexivan
- Feature Request: Add possibility to define which script should get forwarded arguments by @alexander-schranz
- List missing PHP extensions during composer create-project by @gitressa
- Composer Deleted all my files on under root folder by @tuyenvandovn
- Pacstall by @trymeouteh
- Error composer install Laravel by @MSerega
- CA bundle error while being up to date, and Composer dependencies require a PHP version ">= 7.2.5" error by @YepesAE
- Add more command completion by @Seldaek
- Skip generate autoload if <nothing to install> by @btxtiger
- composer install exception Could not delete /home/vagrant/production-planner/vendor/composer/: by @smarttoolsbox
- [Help Wanted] Increasing test coverage of Command classes by @Seldaek
- Composer seems to work on iTerm, but not on VSCode by @lmdamato
- validate license in interactive composer init by @ktomk
- ANSI output broken with ZOC client for show/info commands by @Gappa
- "composer update --no-dev" returns " Could not delete /var/www/roundcube/vendor/endroid/qr-code/assets/data/qrvfr22.dat:" by @Danrancan
- The "https://packagist.org/packages.json" file could not be downloaded: SSL operation failed by @sreeraj-ramesh
- Info from https://repo.packagist.org by @galexth
- [Feture request] post-require-cmd script by @hubertnnn
- composer install/update checks requirements even from "require-dev" stuff by @6562680
- Add pwsh completion by @silverqx
- OpenSSL SSL_connect: Connection reset by peer in connection to api.github.com:443 by @ayan013
- How to treat allow-plugin's warnings as errors? by @DmitryMaksimov
- Support providers/replacers in "why" by @calvinalkan
- cannot install composer by @mohammeo
- Remove unwanted message by @nhantr
- The Composer installer script did not run correctly because composer.phar was not downloaded. by @Mohit6504
- Docker NPM Install Error: require.@selectize/selectize is invalid by @dan-burt
- Feature: Environment variable to trigger `--prefer-lowest` by @ciaranmcnulty
- Official `composer` docker images are not built automatically by @boesing
- `install: unrecognized option '--ignore-platform-reqs'` with latest composer Docker image by @warkadiuszz
- Idea: `composer update --bump` by @enumag
- Duplicate `--ignore-platform-req` suggestion by @AndrolGenhald
- Composer trying to install older version despite incompatibility and newer one being available by @Meryl
- modify composer.json without dump autoload (ask) by @macauisvai
- completion: `bad option -t` error by @staabm
- post-drupal-scaffold-cmd do not run because composer aborts when it shouldn't by @webprogrammierer
- syntax error, unexpected ')', expecting '|' or variable (T_VARIABLE) at vendor/symfony/yaml/Parser.php:478 by @ndethi
- composer 1.10 with max php 7.4 by @LarsBeiDrKlein
- In Config.php line 609 by @novanfatk
- COMPOSER_IGNORE_PLATFORM_REQS is set. You may experience unexpected errors. by @foremtehan
- "composer outdated" suggest package with lower version by @khalyomede
- Misleading error message regarding conflicts by @devantoine
- Disable installed.php file generation by @garygreen
- Composer\Downloader\TransportException::setResponseInfo() by @DesRodman
- composer times out no matter what I do by @bahbarnett
- unknown error after host machine update by @valentinomariotto
- Docker needs COMPOSER_ALLOW_SUPERUSER when running plugins inside Dockerfile since 2.4.2 by @robertvanlienden
- composer update on v2.4.2: Failed to write into cache: file_put_contents(%localappdata%/Composer/repo/...) In Cache.php line 147 by @aetonsi
- Package "spatie/laravel-ray" is not installed error even when package is not required by @qwertynik
- Composer should allow to diff composer.lock changes by @dkarlovi
- composer bump: The "--dry-run" option does not exist. by @dozer111
- Why does the autoloader `require` instead of `require_once`? by @wgevaert
- Replacing path local package with upstream fails by @liayn
- CTRL+C does not exit Composer install/update in WSL2/Windows Terminal by @mortona42
- Composer bisect command by @Seldaek
- Unable to install composer on linux by @starkdg
- Add resolved platform dependencies to composer.lock by @basz
- Incorrect dependencies resolution under certain conditions by @T2L
- Temporary constraints does not work when using wildcard by @T2L
- feature suggestion: pnpm mode by @DanielRuf
- Changes to `psr-4` in symlinked package not recognized during `composer update` by @bilogic
- What guardrails need to be in place in order to run Composer without proc_open? by @effulgentsia
- Zip extraction issues investigation by @pramod-mandadapu
- HOME or COMPOSER_HOME by @Justman10000
- WSL docker detection does not work during Buildkit builds by @ciaranmcnulty
- Failure to fetch metadata of public GitHub repository hides rate limit issues with --no-interaction by @glaubinix
- composer audit used Composer version by @glaubinix
- [FeatureRequest] Composer info with Date of the tag by @alexander-schranz
- Checking missing packages in 2.5.0 breaks our workflow by @nickygerritsen
- Set default config for namespace and author by @Schrank
- MediaWiki 1.35.6-1061 on Synology DSM & Composer error by @drewdsaur
- PHP Version 8.1.12 installed and but when try to install Composer "PHP version (1.0.0) does not support" error get by @nkuldip
- Does `composer update --lock` update dependencies set as `dev-master`? by @garethellis36
- [Help Wanted] Created Package Classes not found by @tuxtux59
- Failing to get composer to work with a private bitbucket repository by @Marchiuzzz
- Vendor scripts do not run under same PHP executable by @coreyworrell
- after install composer, it doesn't work。program is : In CurlDownloader.php line 646: cURL error: 2 (CURLM_BAD_EASY_HANDLE): cURL message: An easy handle was not good/valid. by @cjzyy
- Offline mode by @shyim
- Cannot make branch alias for dev-master (renaming master to main) by @danepowell
- composer cache directory and other files trying to install in composer.phar/.... by @jcc5018
- "./composer.json" does not match the expected JSON schema: by @AmjadKhoulani
- Installation failed, deleting ./composer.json. by @oscarchen-code
- Tabs in `composer.lock` if `composer.json` indented using tabs by @maximal
- `ArchiveManager::archive()` doesn't appear to preserve file timestamps by @thomasfw
- $baseDir in autoload file is hardcoded paths by @Saki-hanna
- GitDriver requires a usable cache directory, and it looks like you set it to be disabled by @Arr-n-D
- Adding a plugin to the allow-plugins section should be alphabetical if sort-packages is enabled by @hostep
- PITA to get some packages from github b/c useragent is rate limited & other stupid crap by @working-name
- [FR] Add a `--type` option to the `reinstall` command by @brandonkelly
- Support zstd for file decompression? by @romulasry
- Error while installing Laravel - installation failed, deleting, composer.json by @Guru404
- Website manual installation incorrect by @theking2
- Composer Issue on WSL by @awaisjavaid930
- Composer update and install ignoring the php version configured as target platform by @oliworx
RELEASES
See all- 1.0.0-alpha7 by @Seldaek
- 1.0.0-alpha6 by @Seldaek
- 1.0.0-alpha5 by @Seldaek
- 1.0.0-alpha4 by @Seldaek
- 1.0.0-alpha3 by @Seldaek
- 1.0.0-alpha2 by @Seldaek
- 1.0.0-alpha1 by @Seldaek
- 1.0.0-alpha8 by @Seldaek
- 1.0.0-alpha9 by @Seldaek
- 1.0.0-alpha10 by @Seldaek
- by @Seldaek
- 1.2.2 by @alcohol
- 1.2.3 by @Seldaek
- 1.2.4 by @alcohol
- 1.3.0-RC by @Seldaek
- 1.3.0 by @Seldaek
- 1.3.1 by @Seldaek
- 1.3.2 by @Seldaek
- 1.3.3 by @Seldaek
- 1.4.0 by @Seldaek
- 1.4.1 by @Seldaek
- 1.4.2 by @Seldaek
- 1.4.3 by @Seldaek
- 1.5.0 by @Seldaek
- 1.5.1 by @alcohol
- 1.5.2 by @Seldaek
- 1.5.3 by @Seldaek
- 1.5.4 by @Seldaek
- 1.5.5 by @Seldaek
- 1.5.6 by @Seldaek
- 1.6.0-RC by @Seldaek
- 1.6.0 by @Seldaek
- 1.6.1 by @Seldaek
- 1.6.2 by @Seldaek
- 1.6.3 by @Seldaek
- 1.6.4 by @Seldaek
- 1.6.5 by @Seldaek
- 1.7.0-RC by @Seldaek
- 1.7.0 by @Seldaek
- 1.7.1 by @Seldaek
- 1.7.2 by @Seldaek
- 1.7.3 by @Seldaek
- 1.8.0 by @Seldaek
- 1.8.1 by @Seldaek
- 1.8.2 by @Seldaek
- 1.8.3 by @Seldaek
- 1.8.4 by @Seldaek
- 1.8.5 by @Seldaek
- 1.8.6 by @Seldaek
- 1.9.0 by @Seldaek
- 1.9.1 by @Seldaek
- 1.9.2 by @Seldaek
- 1.9.3 by @Seldaek
- 1.10.0-RC by @Seldaek
- 1.10.0 by @Seldaek
- 1.10.1 by @Seldaek
- 1.10.2 by @Seldaek
- 1.10.3 by @Seldaek
- 1.10.4 by @Seldaek
- 1.10.5 by @Seldaek
- 1.10.6 by @github-actions[bot]
- 1.10.7 by @github-actions[bot]
- 2.0.0-alpha1 by @github-actions[bot]
- 1.10.8 by @github-actions[bot]
- 2.0.0-alpha2 by @github-actions[bot]
- 1.10.9 by @github-actions[bot]
- 1.10.10 by @github-actions[bot]
- 2.0.0-alpha3 by @github-actions[bot]
- 1.10.11 by @github-actions[bot]
- 1.10.12 by @github-actions[bot]
- 1.10.13 by @github-actions[bot]
- 2.0.0-RC1 by @Seldaek
- 1.10.14 by @github-actions[bot]
- 1.10.15 by @github-actions[bot]
- 2.0.0-RC2 by @github-actions[bot]
- 1.10.16 by @github-actions[bot]
- 2.0.0 by @github-actions[bot]
- 2.0.1 by @github-actions[bot]
- 2.0.2 by @github-actions[bot]
- 2.0.3 by @github-actions[bot]
- 1.10.17 by @github-actions[bot]
- 2.0.4 by @github-actions[bot]
- 2.0.5 by @github-actions[bot]
- 2.0.6 by @github-actions[bot]
- 2.0.7 by @github-actions[bot]
- 1.10.18 by @github-actions[bot]
- 2.4.3 by @github-actions[bot]
- 2.4.2 by @github-actions[bot]
- 2.4.1 by @github-actions[bot]
- 2.2.18 by @github-actions[bot]
- 2.4.0 by @github-actions[bot]
- 2.4.0-RC1 by @github-actions[bot]
- 2.3.10 by @github-actions[bot]
- 2.2.17 by @github-actions[bot]
- 2.3.9 by @github-actions[bot]
- 2.2.16 by @github-actions[bot]
- 2.3.8 by @github-actions[bot]
- 2.2.15 by @github-actions[bot]
- 2.3.7 by @github-actions[bot]
- 2.2.14 by @github-actions[bot]
- 2.3.6 by @github-actions[bot]
- 2.2.13 by @github-actions[bot]
- 2.3.5 by @github-actions[bot]
- 2.2.12 by @github-actions[bot]
- 1.10.26 by @github-actions[bot]
- 2.3.4 by @github-actions[bot]
- 2.3.3 by @github-actions[bot]
- 2.2.11 by @github-actions[bot]
- 2.3.2 by @github-actions[bot]
- 2.3.1 by @github-actions[bot]
- 2.3.0 by @github-actions[bot]
- 2.2.10 by @github-actions[bot]
- 2.3.0-RC2 by @github-actions[bot]
- 2.3.0-RC1 by @github-actions[bot]
- 2.2.9 by @github-actions[bot]
- 2.2.8 by @github-actions[bot]
- 2.2.7 by @github-actions[bot]
- 2.2.6 by @github-actions[bot]
- 2.2.5 by @github-actions[bot]
- 1.10.25 by @github-actions[bot]
- 2.2.4 by @github-actions[bot]
- 2.2.3 by @github-actions[bot]
- 2.2.2 by @github-actions[bot]
- 2.2.1 by @github-actions[bot]
- 2.2.0 by @github-actions[bot]
- 1.10.24 by @github-actions[bot]
- 2.2.0-RC1 by @github-actions[bot]
- 2.1.14 by @github-actions[bot]
- 2.1.12 by @github-actions[bot]
- 2.1.11 by @github-actions[bot]
- 2.1.10 by @github-actions[bot]
- 2.1.9 by @github-actions[bot]
- 1.10.23 by @github-actions[bot]
- 2.1.8 by @github-actions[bot]
- 2.1.7 by @github-actions[bot]
- 2.1.6 by @github-actions[bot]
- 2.1.5 by @github-actions[bot]
- 2.1.4 by @github-actions[bot]
- 2.1.3 by @github-actions[bot]
- 2.1.2 by @github-actions[bot]
- 2.1.1 by @github-actions[bot]
- 2.1.0 by @github-actions[bot]
- 2.1.0-RC1 by @github-actions[bot]
- 2.0.14 by @github-actions[bot]
- 2.0.13 by @github-actions[bot]
- 1.10.22 by @github-actions[bot]
- 2.0.12 by @github-actions[bot]
- 1.10.21 by @github-actions[bot]
- 2.0.11 by @github-actions[bot]
- 2.0.10 by @github-actions[bot]
- 2.0.9 by @github-actions[bot]
- 1.10.20 by @github-actions[bot]
- 1.10.19 by @github-actions[bot]
- 2.0.8 by @github-actions[bot]
- 2.4.4 by @github-actions[bot]
- 2.5.8 by @github-actions[bot]
- 2.5.7 by @github-actions[bot]
- 2.5.6 by @github-actions[bot]
- 2.5.5 by @github-actions[bot]
- 2.5.4 by @github-actions[bot]
- 2.2.21 by @github-actions[bot]
- 2.5.3 by @github-actions[bot]
- 2.2.20 by @github-actions[bot]
- 2.5.2 by @github-actions[bot]
- 2.2.19 by @github-actions[bot]
- 2.5.1 by @github-actions[bot]
- 2.5.0 by @github-actions[bot]
- 2.6.3 by @github-actions[bot]
- 2.6.2 by @github-actions[bot]
- 2.6.1 by @github-actions[bot]
- 2.6.0 by @github-actions[bot]