Private Packagist 2025 contributions for the Open Source Pledge This is now our third year as a member of the Open Source Pledge. Private Packagist subscriptions help fund not only the development of Composer and Packagist.org, but also the open source dependencie...

Private Packagist is a member of the @opensourcepledge.com & gave over $4k/FTE in 2025 to #opensource maintainers. Have your company join too! blog.packagist.com/private-pack... - Reach out if you want to be a launch partner for our Composer&Packagist.org sponsorship program! #composerphp #php #phpc

Nils Adermann wearing a blue Private Packagist hoodie and yellow Private Packagist t-shirt on stage next to a lectern pointing at a slide, photographed across backs of audience heads.

Laracon EU audience facing the stage

Nils Adermann taking a selfie from the balcony above the Laracon EU crowd with Nuno Maduro on a large screen talking to the audience.

Sign with community sponsor logos at Laracon EU Amsterdam including Private Packagist

Loved the very engaged audience of a thousand people at #LaraconEU 2026 in Amsterdam today at my "Composer Deep Dive" talk! Proud to sponsor the event with Private Packagist /
@packagist.com - Find me and chat about package management or @thephpf.bsky.social! #laravel #laracon #php #composerphp

Just arrived in Amsterdam for #LaraconEU - my talk "Composer Deep Dive" is tomorrow afternoon at 2:30pm! Hope to talk to as many of you about #composerphp @packagist.com and @thephpf.bsky.social ! #laravel #php

Full audience at the c-base for the Symfony Usergroup Berlin Opening

Excited to speak at #symfony user group Berlin tonight! #sfugberlin #composerphp

What's New in Private Packagist, February 2026 Update Private Packagist has continued to evolve over the past three months with significant improvements to authentication flows, security hardening, and notification capabilities. Here are the highlights f...

🚀 Private Packagist February update: Redesigned login flow, team member MFA resets for org owners, new Microsoft Teams Workflow notifications (old connectors deprecated), clickable composer search URLs in your terminal blog.packagist.com/whats-new-in... #composerphp #php #phpc

Nils Adermann in yellow Private Packagist t-shirt and blue hoodie presenting in front of a crowd at SymfonyCon Amsterdam 2025.

Nils Adermann presenting on 2FA enforcement in package manager ecosystems in front of a crowd at SymfonyCon Amsterdam 2025.

Nils Adermann presenting at SymfonyCon Amsterdam 2025 on stage, discussing the npm Shai-Hulud Worm security incident. The slide shows details of the November 2024 supply chain attack that compromised 700+ packages and exposed credentials from 26k+ repositories through GitHub Actions code injection.

Conference attendees gathered around the Private Packagist booth at SymfonyCon Amsterdam 2025 having discussions.

Back from our annual #SymfonyCon trip! Great experience celebrating 20 years of #Symfony with its community in Amsterdam. The @packagist.com booth was busy throughout the event, and my package manager security outlook talk sparked good conversations. See you in Warsaw 2026! #php #composerphp

What’s New in Private Packagist, November Update We've shipped several important updates to Private Packagist over the past three months, including more insights on the package usage tracking page, the introduction of Trusted Publishing for secure a...

New in Private Packagist: Usage Tracking can now help prioritize security updates by showing how deps cascade through projects and where vulnerable versions are used. Trusted Publishing for GitHub Actions and better synchronization setup. blog.packagist.com/whats-new-in... #php #phpc #composerphp

Strengthening PHP Supply Chain Security with a Transparency Log for Packagist.org The release of Composer 2.9 this week introduced new security features on the Composer CLI client, which were funded by Private Packagist through service subscriptions. But in parallel, we are working...

After Composer 2.9 CLI security improvements, we're working on a transparency log for Packagist to strengthen PHP supply chain security, funded by the @sovereign.tech with help of the @thephpf.bsky.social and Private Packagist. Details at blog.packagist.com/strengthenin... #php #phpc #composerphp

Composer 2.9 Release We are pleased to announce the release of Composer 2.9.0, bringing improvements to security, repository management from the CLI, and lots more. Automatic Security Blocking Composer now automaticall...

Composer 2.9 is here! 🚀 It automatically blocks packages with known vulnerabilities, has a new repository command to manage repos from the CLI, and lots more!

blog.packagist.com/composer-2-9/
#composerphp #phpc #PHP

Release 2.9.0-RC1 · composer/composer Composer 2.9 is ready for a release, and we need your help to test it and report any regression. Please try it out! Running composer self-update --preview will get you the 2.9.0-RC1 Running compos...

Composer 2.9 is coming, and there's an RC to try out! We need your help and feedback github.com/composer/com... #composerphp #phpc

Bitbucket deprecated App Passwords Bitbucket announced that they deprecated app passwords in favor of their new API token system. This change affects organizations using Private Packagist with Bitbucket Cloud (bitbucket.org) workspace ...

Bitbucket Cloud is retiring app passwords in favor of API tokens. If you're using Private Packagist with Bitbucket Cloud, migrate now to avoid future disruptions.

Our blog post explains it step-by-step: blog.packagist.com/bitbucket-de...

#php #composerphp #phpc #privatepackagist #bitbucket

Original post on mastodon.social

Caching in CI/CD sollte eingesetzt werden, wann immer es geht.

Das hilft nicht nur, die Infrastrukturkosten niedrig zu halten, sondern verkürzt auch eigenen Build-Zeiten mitunter erheblich.

Für GitHub-/Gitea-kompatible Workflows gibt es actions/cache, welches trivial einzurichten ist […]

Together with PyPI, Maven Central, cratesio and other major package registries we signed a statement on sustainable open source infrastructure.
3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs.
#phpc #php

Nils Adermann behind a lectern on stage at API PlatformCon receiving a birthday cake while the audience claps. The slide on stage asks "Questions / Feedback?" and points to Private Packagist.

Had a great time presenting Composer Best Practices for 2025 at #APIPlatformCon in Lille this morning. Meet me at our booth, I'd love to hear all about how you work with #composerphp! #php #phpc #supplychainsecurity #symfony #apiplatform

Badge saying API Platform Conference 2025, Lille (France) & Online - Private Packagist is a wonderful Silver Sponsor and the Private Packagist elephant logo is shown on the right.

Would you like to attend #APIPlatformCon 2025 in Lille on Sep 18/19 or online? Private Packagist is sponsoring: 4 tickets to give away! Part of a group underrepresented at tech conferences, or can't afford a ticket? Repost and reply favorite PHP package(s) #php #composerphp #phpc

Packagist The PHP Package Repository

The era of Composer v1 finally comes to an end, long live Composer v2! 👑 Today packagist.org support for v1 metadata has been shut down as announced last year. blog.packagist.com/packagist-or... #composerphp #phpc #php

What’s New in Private Packagist, August Update We've been busy improving Private Packagist over the past few months with a focus on package discovery, user experience improvements, and improved security monitoring tools. Here are the most signific...

August update: dependency usage tracking across your packages, automatic GitLab token rotation, and Conductor improvements with custom labels and smarter PR handling blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

Igor Benko and Nils Adermann in Private Packagist T-shirts in front of a Private Packagist booth

Meet @igorbenko.bsky.social and me at IPC in Berlin today & tomorrow at our @packagist.com booth. 👋 Would love to chat about Composer, supply chain security, dependencies, or show you our new tool Conductor! Don't forget to pick up a Composer sticker 😉

#php #phpc #composerphp #ipc #ipc2025

How To Install Composer On CentOS Stream 10 Light

Streamline your PHP workflow!

Learn how to install #Composer on #CentOS Stream 10 – the go-to dependency manager for modern #PHP development.

wiki.crowncloud.net?How_to_Insta...

#LinuxTips #CentOSStream #ComposerPHP #WebDevelopment #OpenSource #DevOps #SysAdmin #PHPTools

How To Install PHP Composer On Ubuntu 20 04 Light

Manage PHP dependencies like a pro!

Learn how to install #Composer on #Ubuntu 20.04 — the essential tool for modern PHP development.

wiki.crowncloud.net?How_to_Insta...

#LinuxTips #PHPTools #Ubuntu2004 #WebDevelopment #OpenSource #ComposerPHP #DevOps #SysAdmin

What’s New in Private Packagist, May Update Private Packagist has been evolving steadily over the past three months with a focus on API improvements, enhanced security, and refined user experience. Let's dive into the significant updates that h...

May update: Progress on Conductor, expiring API credentials, stronger account protection, improved user profile/settings UX & performance boosts! Details: blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

Nils Adermann standing on a stage next to a podium and in front of a large screen saying "Composer Guide to Supply Chain Security" with a Packagist elephant logo and a Composer logo

Was a pleasure to speak at @symfony.com Live Berlin last week, here are the slides for my talks "Composer Guide to Supply Chain Security" naderman.de/slippy/slide... and the lightening talk "composer.lock demystified" naderman.de/slippy/slide... #php #phpc #symfony #composerphp

Thanks for all the kind feedback on my supply chain security for #composerphp talk, was a great experience speaking at #phpuk - hope a lot of you sign up for Conductor and try it out when available!

#php #phpuk25

What’s New in Private Packagist, February Update While we’re also putting the final touches on Conductor, our team has shipped regular updates and improvements to Private Packagist. We’ll share some significant changes we've made to Private Packagis...

Our deploy pipeline never sleeps! Here are all the improvements to Private Packagist over the last months: We added support for PIE, streamlined our GitHub sync and made it easier to track your setup progress, more on our blog: blog.packagist.com/whats-new-in... #composerphp #composer #php #phpc

Going to give a talk on #composerphp internals at the #LaraconEU in conference at 2:20pm after lunch! Come join me for a quick look into architecture, boolean algebra and computational complexity theory! 😁 #laracon #laravel

2.8 | Documentação do Composer | docs.dev.br

🚀 Ótimas notícias! A documentação do Composer 2.8 agora está disponível em português brasileiro! 🇧🇷

Confira: docs.dev.br/pt-br/docs/c...

@naderman.de @seld.be

#composerphp #docs #traducao #translation #ptbr #opensource

My slides for "Composer Behind the Scenes" at #SymfonyCon Vienna are now available. Useful if you want to try and follow my SAT solver examples since I lacked a laser pointer during the talk 😉 Thanks for all the positive feedback! ❤️ naderman.de/slippy/slide... #composerphp #php #phpc #symfony

Team photo in front of Symfony Logo

Meet our team at #SymfomyCon Vienna! We'd love to chat about how you manage your Composer dependencies, your questions around supply chain security, Private Packagist or our upcoming product Conductor! #symfony #php #composerphp

Conductor - Automatic dependency updates for Composer Automatic dependency updates for Composer - tailor made for PHP. Grouped and scheduled in ways that just make sense for PHP projects.

We're excited to introduce you to 🧑‍✈️Conductor! Automatic dependency update PRs with Composer for PHP projects - Security fixes patched in minutes - Continuous updates without the hassle - all running in your own CI env!

Early access waitlist: packagist.com/features/con...

#composerphp #php #phpc

Meet me at #DrupalCampBerlin today to chat about #composerphp, Private Packagist, supply chain security, funding open source and PHP dev workflows! Would love to learn more about how you keep your projects up to date! I got Composer stickers too!

#phpc #drupal #drupalcamp