That as fun! Panel discussion with @sebastian and @Girgias, moderated by @robert on the State of the PHP World at #IntPHPCon in Berlin #phpc #php #composerphp

Tht was fun! Panel discussion with @sebastian and @Girgias on the State of the PHP World at #IntPHPCon in Berlin #phpc #php #composerphp

Slides for my #IntPHPCon talk "Get a grip on your project's supply chain" https://naderman.de/slippy/slides/2023-05-23-IPC-Get-a-grip-on-your-projects-supply-chain.pdf - find me if you want some Composer stickers! 👋#composerphp #supplychain #security

@MarkBaker It is times like this I'm reminded how varied the "PHP community" is. Different life experiences, different priorities, different constraints.

I can't imagine a life without Composer. Like, seriously, I'd probably have moved on from #php if #composerphp hadn't become a thing around the time it did.

But, I'm a far cry from people whose livelihoods and hobbies involve running old versions of PHP on shared hosting environments.

#phpc

RT @seldaek
Composer 2.5.0 is released! Many small improvements https://github.com/composer/composer/releases/tag/2.5.0 #composerphp #phpc

Composer 2.5.0 is released! Many small improvements https://github.com/composer/composer/releases/tag/2.5.0 #composerphp #phpc

After 8 years - new release for my #Cassandra and #ScyllaDB native @php driver.
Now with support for native Persistent connections!
Also available through #ComposerPHP

More information, as usual, on https://github.com/uri2x/php-cql/

Thank you
@AWSOpen for once again providing us with #AWS credits to run key parts of http://packagist.org and thus supporting the entire #php ecosystem https://aws.amazon.com/blogs/opensource/aws-promotional-credits-open-source-projects/

You can help sponsor Packagist & Composer infrastructure, and more importantly all the many hours of work on maintaining and operating http://packagist.org through GitHub sponsors https://github.com/sponsors/composer or Tidelift https://tidelift.com/subscription/pkg/packagist-composer-composer

#phpc #composerphp

Ok folks, `composer audit` is out! 🥳

Time to run `composer self-update`, and then audit the heck out of your projects. 😜

(And don't forget to add it to your CI pipeline.)

RT @seldaek@twitter.com

Composer 2.4 is out! 🚀 It adds auditing of dependencies for security, bash completions and many smaller additions!

See the highlights in the release announcement https://blog.packagist.com/composer-2-4/ or read the complete changelog https://github.com/composer/composer/releases/tag/2.4.0 #composerphp #phpc

🐦🔗: https://twitter.com/seldaek/status/1559545269523341313

RT @toflar@twitter.com

I’ve finally uploaded my slides of my #composerphp talk from 3 weeks ago at #neoscon. The talk can be rewatched on Youtube. Link in the description. Thanks again for having me, Neos community! <3 Enjoy :) https://speakerdeck.com/toflar/the-long-journey-of-making-composer-memory-efficient-and-fast #php #conference

🐦🔗: https://twitter.com/toflar/status/1527655028789587969

RT @seldaek@twitter.com

Security releases for Composer are available now! We recommend upgrading even though most Composer users are unlikely to be directly vulnerable. https://blog.packagist.com/cve-2022-24828-composer-command-injection-vulnerability/ #composerphp #phpc

🐦🔗: https://twitter.com/seldaek/status/1514261687418904582

RT @packagist@twitter.com

http://Packagist.org now tracks security advisories on GitHub in addition to FriendsOfPHP/security-advisories. 🚀 As a maintainer, please continue to publish your advisories to FriendsOfPHP, other PHP tools exclusively rely on that repository. #composerphp #phpc #php security

🐦🔗: https://twitter.com/packagist/status/1504083104952164352

This one has been getting to me for a while.

Is oomphinc/composer-installers-extender a drop in replacement for robloach/component-installer?

I can't seem to get it to work with composer 2 and the config/setup looks the same but it doesn't compile component packages the same way as robloach does
#composerphp #helpmeoutplease

RT @packagist
👋 We're hiring a Senior Software Engineer in Berlin or remote! 💻 Build high-quality supply chain tools for thousands of devs in the PHP ecosystem 🐘 with the makers of #composerphp #php #phpc

RT @toflar
It’s published! All you ever wanted to know about how and why #composerphp got so much more efficient in one big blog post. I put in all my heart and I really hope you enjoy reading it. Have fun! <3 https://medium.com/@yanick.witschi/the-long-journey-of-making-phps-composer-memory-efficient-and-fast-63d12944aaa8 #php

RT @naderman@twitter.com

Some #PHP maintainers seem to routinely delete version tags and recreate them pointing to different commits. 😱 Please STOP! 🛑 I see this a lot through Private Packagist support and it's awful. If you have to pull a release, publish it again with a new number. #phpc #composerphp

🐦🔗: https://twitter.com/naderman/status/1486297297713520643

RT @seldaek@twitter.com

Composer 2.2 is out! Santa came early this year with security improvements 🔒, new features 🎁 and a performance boost 🚀

See the highlights in the release announcement https://blog.packagist.com/composer-2-2/ or read the complete changelog https://github.com/composer/composer/releases/tag/2.2.0 #composerphp #phpc

🐦🔗: https://twitter.com/seldaek/status/1473598867866333191

RT @seldaek
Composer 2.2.0-RC1 is ready to be tested! It comes with big performance gains, more secure plugin loading, and many more features and fixes https://github.com/composer/composer/releases/tag/2.2.0-RC1 #composerphp #phpc

RT @seldaek@twitter.com

I am saying goodbye to my "PHP Version Stats" blog series 👋🏻 Read on to see the good news! 🎉 https://blog.packagist.com/sunsetting-the-php-version-stats-blog-series/ #composerphp #phpc

🐦🔗: https://twitter.com/seldaek/status/1400441522684825602

RT @seldaek
I am saying goodbye to my "PHP Version Stats" blog series 👋🏻 Read on to see the good news! 🎉 https://blog.packagist.com/sunsetting-the-php-version-stats-blog-series/ #composerphp #phpc