Composer & Packagist now have a sponsorship program. Thank you to our launch sponsors 🤝 @AikidoSecurity, @awscloud, @SocketSecurity, @BunnyCDN, @upsundotcom, @sonatype, @tideways, @datadog and @algolia for sharing this burden.
blog.packagist.com/announcing-the…
#php #phpc #composerphp
PHP Package Repo for #ComposerPHP getcomposer.org - packagist.org open source - packagist.com private packages. @[email protected]
- We're excited to announce @upsundotcom is now sponsoring #composerphp & Packagist maintenance, ops and development! They have a long history in the #PHP ecosystem. Their contribution helps us push forward with our work on improving supply chain security for the PHP ecosystem.
- CI/CD pipelines are a prime target for supply chain attacks. We hardened the #GitHubActions workflows for Composer, Packagist and Private Packagist with #zizmor🌈, a GHA static analysis tool and wrote down how to the same for yours 👇 #php #phpc #composerphp
- We’re sponsoring Meet Magento Germany on Oct 22, 2026 in Mainz, Germany. Come meet our founder @naderman to talk software supply chain security and answer your questions. Tickets available, CFP open: de.meet-magento.com #meetmagento #magento #meetmagentode #adobecommerce
- 📌 Stable versions on Packagist are now immutable. Once published, the commit a version points to can no longer change. Retags are blocked, deletions are tracked with a reason and recoverable, and everything is recorded on the public transparency log. #php #phpc #composerphp

