Lightnews — Scholar-powered news

Packagist @packagist.com · 18d

Bitbucket Cloud is retiring app passwords in favor of API tokens. If you're using Private Packagist with Bitbucket Cloud, migrate now to avoid future disruptions.

Our blog post explains it step-by-step: blog.packagist.com/bitbucket-de...

#php #composerphp #phpc #privatepackagist #bitbucket

Bitbucket deprecated App Passwords

Bitbucket announced that they deprecated app passwords in favor of their new API token system. This change affects organizations using Private Packagist with Bitbucket Cloud (bitbucket.org) workspace ...

blog.packagist.com

2

Packagist @packagist.com · 21d

Here's our blog post on the statement: blog.packagist.com/a-call-for-s...

A Call for Sustainable Open Source Infrastructure

Today, we joined other major package registries in signing an important joint statement on sustainable stewardship of open source infrastructure. Together with Maven Central, PyPI, crates.io, Open VSX...

blog.packagist.com

1

Packagist @packagist.com · 21d

Together with PyPI, Maven Central, cratesio and other major package registries we signed a statement on sustainable open source infrastructure.
3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs.
#phpc #php

OpenSSF @openssf.org · 21d

Registries like PyPI, Maven Central & crates.io power the ecosystem.

They can’t run on goodwill alone.

OpenSSF endorses the Joint Statement on Sustainable Stewardship.

👉 openssf.org/blog/2025/09...

#PreserveOpenSource

1 8 15

Packagist @packagist.com · 24d

🚨 Warning to #PHP package maintainers: We did not email you to change your passwords & 2FA. Emails asking you to update your credentials are a phishing attempt. We had the phishing site & domain taken down. If you got the email and entered your credentials, please contact us. #phpc

39 25

Reposted by Packagist

API Platform @api-platform.com · 25d

Thank you @packagist.com for supporting the #APIPlatformCon 2025!

1 5

Reposted by Packagist

Nils Adermann @naderman.de · 25d

🚨 PSA for #PHP package maintainers: DO NOT REPLACE tags! If you messed up a release simply do another. No matter how quickly you notice a mistake, automatic tools already pulled the original tag, triggered automatic updates. Users will never know you recreated the tag and use the broken state. #phpc

13 9

Reposted by Packagist

Nils Adermann @naderman.de · 26d

Had a great time presenting Composer Best Practices for 2025 at #APIPlatformCon in Lille this morning. Meet me at our booth, I'd love to hear all about how you work with #composerphp! #php #phpc #supplychainsecurity #symfony #apiplatform

Nils Adermann behind a lectern on stage at API PlatformCon receiving a birthday cake while the audience claps. The slide on stage asks "Questions / Feedback?" and points to Private Packagist.

1 1 5

Packagist @packagist.com · Sep 3

We'll pick winners by the end of the week and look forward to seeing you at our booth in Lille!

Packagist @packagist.com · Sep 3

Would you like to attend #APIPlatformCon 2025 in Lille on Sep 18/19 or online? Private Packagist is sponsoring: 4 tickets to give away! Part of a group underrepresented at tech conferences, or can't afford a ticket? Repost and reply favorite PHP package(s) #php #composerphp #phpc

1 5 4

Packagist @packagist.com · Sep 1

The era of Composer v1 finally comes to an end, long live Composer v2! 👑 Today packagist.org support for v1 metadata has been shut down as announced last year. blog.packagist.com/packagist-or... #composerphp #phpc #php

Packagist

The PHP Package Repository

packagist.org

1 6 11

Packagist @packagist.com · Sep 1

August update: dependency usage tracking across your packages, automatic GitLab token rotation, and Conductor improvements with custom labels and smarter PR handling blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

What’s New in Private Packagist, August Update

We've been busy improving Private Packagist over the past few months with a focus on package discovery, user experience improvements, and improved security monitoring tools. Here are the most signific...

blog.packagist.com

3 2

Reposted by Packagist

Nils Adermann @naderman.de · Jul 28

Arrived in Denver for #Laracon - look forward to meeting everyone at our @packagist.com booth! Would love to talk to everyone about how you use Composer, handle updates and apply security patches, or anything else relating to dependency management! #laraconus #laravel #phpc

2 9

Packagist @packagist.com · Jul 4

🚨 Packagist.org shutdown of Composer 1.x support postponed to September 1st, 2025. Act now, upgrade to Composer 2! Last resort: check out Private Packagist extended 1.x support if you really cannot migrate right now. blog.packagist.com/packagist-or...

Packagist.org shutdown of Composer 1.x support postponed to September 1st, 2025

With the deadline drawing near, we’d like to remind you that we are discontinuing Composer 1.x support on Packagist.org soon. We're extending our original timeline by one month to give teams additiona...

blog.packagist.com

9 4

Reposted by Packagist

Nils Adermann @naderman.de · Jun 3

Meet @igorbenko.bsky.social and me at IPC in Berlin today & tomorrow at our @packagist.com booth. 👋 Would love to chat about Composer, supply chain security, dependencies, or show you our new tool Conductor! Don't forget to pick up a Composer sticker 😉

#php #phpc #composerphp #ipc #ipc2025

Igor Benko and Nils Adermann in Private Packagist T-shirts in front of a Private Packagist booth

3 6

Reposted by Packagist

Nils Adermann @naderman.de · May 27

Will you be in Amsterdam June 17th, or can you make it there? Join us to celebrate PHP turning 30 after #phpverse at Café Restaurant Dauphine with @amsterdamphp.bsky.social from 6:30pm - RSVP www.meetup.com/amsterdamphp... #php #phpc

AmsterdamPHP Special PHPVerse Edition, Tue, Jun 17, 2025, 6:30 PM | Meetup

**🎉 Special AmsterdamPHP Meetup – June 17th, 2025** Right after **[PHPVerse 2025](https://lp.jetbrains.com/phpverse-2025/)**, we’re keeping the momentum going with two of

www.meetup.com

3 7

Reposted by Packagist

Nils Adermann @naderman.de · May 22

Really excited sponsor LaraconUS with @packagist.com - So exciting to see the @laravel.com team really pushing the entire Laravel ecosystem forward and everyone in the Laravel community advancing #PHP! Get a ticket while they're discounted and meet us at our booth in Denver in July!

Laravel @laravel.com · May 14

Laracon early bird pricing ends May 31.

Get your travel approved and secure your ticket!

lrvl.co/laracon-tick...

Laracon 2025

The Flagship Laravel Conference

lrvl.co

1 4 16

Packagist @packagist.com · May 13

May update: Progress on Conductor, expiring API credentials, stronger account protection, improved user profile/settings UX & performance boosts! Details: blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

What’s New in Private Packagist, May Update

Private Packagist has been evolving steadily over the past three months with a focus on API improvements, enhanced security, and refined user experience. Let's dive into the significant updates that h...

blog.packagist.com

2 4

Reposted by Packagist

Nils Adermann @naderman.de · Apr 7

Was a pleasure to speak at @symfony.com Live Berlin last week, here are the slides for my talks "Composer Guide to Supply Chain Security" naderman.de/slippy/slide... and the lightening talk "composer.lock demystified" naderman.de/slippy/slide... #php #phpc #symfony #composerphp

1 1 7

Reposted by Packagist

The PHP Foundation @thephpf.bsky.social · Apr 1

The PHP Foundation's 2024 Transparency & Impact Report is out! Learn about our work to support PHP's future.

Read more: thephp.foundation/blog/2025/03...

The PHP Foundation: Impact and Transparency Report 2024

The PHP Foundation — Supporting, Advancing, and Developing the PHP Language

thephp.foundation

9 15

Reposted by Packagist

Matt Stauffer @mattstauffer.com · Mar 26

I'm working with the PHP Foundation to create a new page on the PHP site: "Why use PHP today?"

I'd love your input on who needs this page, and what they need to hear:
gist.github.com/mattstauffer...

What's the most compelling way to talk about "why use PHP today"?

What's the most compelling way to talk about "why use PHP today"? - notes.md

gist.github.com

3 18 29

Packagist @packagist.com · Mar 27

We apologize if you tried to email us in the last week and got an error message back. Please try emailing us again! DNS should slowly be back to a working state for everyone depending on caches. We're alternatively also always reachable through the chat on our website! #hugops

1

Reposted by Packagist

Nils Adermann @naderman.de · Feb 19

Thanks for all the kind feedback on my supply chain security for #composerphp talk, was a great experience speaking at #phpuk - hope a lot of you sign up for Conductor and try it out when available!

#php #phpuk25

4 5

Packagist @packagist.com · Feb 13

Our deploy pipeline never sleeps! Here are all the improvements to Private Packagist over the last months: We added support for PIE, streamlined our GitHub sync and made it easier to track your setup progress, more on our blog: blog.packagist.com/whats-new-in... #composerphp #composer #php #phpc

What’s New in Private Packagist, February Update

While we’re also putting the final touches on Conductor, our team has shipped regular updates and improvements to Private Packagist. We’ll share some significant changes we've made to Private Packagis...

blog.packagist.com

2 7

Reposted by Packagist

phpukconference.bsky.social @phpukconference.bsky.social · Feb 12

Sponsor Announcement 🚨

We’re excited to welcome @packagist.com as a Silver Sponsor for PHP UK Conference 2025!

Plus, don’t miss co-founder @naderman.de as he takes the stage with his talk "Composer Guide to Supply Chain Security"

#phpuk25 #phpuk #php #phpc #composer

2 4