Tag: composer

Germany is spending 108 million euros on a PHP CMS while the PHP Foundation raised $730K. What that gap means and how PHP developers can close it.

Vet is a Composer plugin that shows the diff of every dependency update before it lands in vendor, and records what you trust in a vet.json file.

cpx 2.0 runs any Composer package command without installing it. Local binaries win by default, aliases are yours to define, and agents get JSON output.

PECL is officially deprecated. Here is how PHP's new extension installer PIE works, why it exists, and how to use it to manage extensions like Composer.

Composer 2.10 adds native malware blocking and a unified config.policy framework for PHP supply chain security. Here is how it works and how to tune it.

The PHP Foundation's new Ecosystem Security Team scanned 300+ Composer packages in its first month. Here is what shipped and how to get involved.

Composer 2.9 and 2.10 bring automatic security blocking, a new repo CLI command, and malware filtering. Here's what changed and how to use it.