Packagist marks 15 years since monolog/monolog became package ID 1, with 469,000+ packages, 200 billion Composer installs, and record growth in 2026.
Eric L. Barnes
Laravel Vet shows you the code each Composer update adds before it reaches vendor/, and fails your build on any package nobody has reviewed yet.
Eric L. Barnes
Composer's creators take the SymfonyCon stage to share what a year of Packagist supply chain attacks taught them, and what changed in Composer 2.10 and 2.11.
Eric L. Barnes
Socket now scans PHP and Composer dependencies for CVEs, malicious packages, and reachable vulnerabilities through its Packagist support.
Eric L. Barnes
