Packagist turns 15, with more than 200 billion package installs 🎉
How Composer and Packagist started, 15 years of milestones, recent growth, and our plans for supply chain security and funding.
@packagist.comPackagist
@packagist.com
@packagist.com@packagist.comWe're super excited for #SymfonyCon 2026 in Warsaw Nov 26-27 and happy to sponsor again! A must-go for anyone working with PHP and #Symfony. Great content, fantastic people. Now more than ever: educate yourself and keep up with ecosystem & tech in general.
@packagist.comNew in Private Packagist, August '26 update: Organization-wide supply chain security controls, MFA enforcement for CLI access, GitLab subgroup sync, artifact packages for suborgs via API, and more complete audit logging.
@packagist.com🔒 An update on Composer & Packagist supply chain security: where we stand, what ships this week with Composer 2.10, what's next.
If you maintain PHP packages, enable MFA now.
blog.packagist.comAn Update on Composer & Packagist Supply Chain SecurityThe last months, and even more so the last weeks, saw an increasing amount of software supply chain attacks targeting open-source ecosystems. A handful of these have hit the PHP ecosystem too, via tak...