public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code
12,642 Commits
3 Branches
209 Tags
54 MiB
PHP 100%
 
Go to file
Tim Düsterhus 089972db87
Generate build provenance attestation during release 
This will simplify secure installation of composer in GitHub Actions to two
calls to `gh` cli with no need to manually import any PGP signing keys:

    gh release --repo composer/composer download --pattern composer.phar
    gh attestation verify --repo composer/composer composer.phar

Given that the current PGP signing key is stored as a GitHub Action secret,
this type of attestation is no less secure than the existing PGP signing.
 		2025-01-08 15:46:13 +01:00
.github Generate build provenance attestation during release 2025-01-08 15:46:13 +01:00
bin Update logic 2024-12-11 09:24:40 +01:00
doc Update docs for `audit` command (#12220) 2024-12-01 13:26:21 +01:00
phpstan Stop relying on OS to find executables on Windows, and migrate most Process calls to array syntax (#12180) 2024-11-06 13:49:06 +01:00
res Add OS families to `php-ext` config options for PIE (#12218) 2024-12-09 14:37:10 +01:00
src Fix new phpstan error 2025-01-08 14:09:14 +01:00
tests Make use of Phar::running() to get the current phar path 2025-01-08 13:46:52 +01:00
.editorconfig Enhancement: Add .editorconfig 2019-01-03 10:49:27 +01:00
.gitattributes chore: remove `composer.lock` from `.gitattributes` (#11674) 2023-10-06 09:59:15 +02:00
.gitignore Add tests for SelfUpdateCommand (#11816) 2024-02-21 20:59:50 +01:00
.php-cs-fixer.php Fix CS (#11003) 2022-08-17 14:20:07 +02:00
CHANGELOG.md Update changelog 2024-12-11 11:57:31 +01:00
CODE_OF_CONDUCT.md Update Code of Conduct to Contributor Covenant v2.1 (#11161) 2022-11-01 10:46:06 +01:00
LICENSE lets avoid silly commits in the future 2017-01-19 12:10:26 +01:00
PORTING_INFO Import initial partial port of the libzypp satsolver. 2011-04-05 17:37:19 +02:00
README.md docs: add binary dependencies (#11505) 2023-07-01 14:20:19 +02:00
UPGRADE-2.0.md chore: fix some comments (#11922) 2024-04-13 09:08:12 +02:00
composer.json Allow react/promise 2.x again, fixes #12188 2024-11-15 13:53:30 +01:00
composer.lock Update deps 2024-12-11 10:53:22 +01:00
phpunit.xml.dist Exclude PHPStan extensions from PHPUnit coverage 2023-01-03 18:57:00 +11:00

README.md

Composer

Dependency Management for PHP

Composer helps you declare, manage, and install dependencies of PHP projects.

See https://getcomposer.org/ for more information and documentation.

Continuous Integration

Installation / Usage

Download and install Composer by following the official instructions.

For usage, see the documentation.

Packages

Find public packages on Packagist.org.

For private package hosting take a look at Private Packagist.

Community

Follow @packagist or @seldaek on Twitter for announcements, or check the #composerphp hashtag.

For support, Stack Overflow offers a good collection of Composer related questions, or you can use the GitHub discussions.

Please note that this project is released with a Contributor Code of Conduct. By participating in this project and its community you agree to abide by those terms.

Requirements

Latest Composer

PHP 7.2.5 or above for the latest version.

Composer 2.2 LTS (Long Term Support)

PHP versions 5.3.2 - 8.1 are still supported via the LTS releases of Composer (2.2.x). If you run the installer or the self-update command the appropriate Composer version for your PHP should be automatically selected.

Binary dependencies

  • 7z (or 7zz)
  • unzip (if 7z is missing)
  • gzip
  • tar
  • unrar
  • xz
  • Git (git)
  • Mercurial (hg)
  • Fossil (fossil)
  • Perforce (p4)
  • Subversion (svn)

It's important to note that the need for these binary dependencies may vary depending on individual use cases. However, for most users, only 2 dependencies are essential for Composer: 7z (or 7zz or unzip), and git.

Authors

See also the list of contributors who participated in this project.

Security Reports

Please send any sensitive issue to security@packagist.org. Thanks!

License

Composer is licensed under the MIT License - see the LICENSE file for details.

Acknowledgments