packagist.org, as data

Packagist is the main Composer repository. It aggregates public PHP packages installable with Composer.Add the `composer.json` to your git or other VCS repository and commit it.### Publish ItOnce you entered your public repository URL in there, your package will be automatically crawled periodically. You just have to make sure you keep the composer.json file up to date.### Sharing Private CodeUse Private Packagist if you want to share private code as a Composer package with colleagues or customers without publishing it for everyone on Packagist.org. Private Packagist allows you to manage your own private Composer repository with per-user authentication, team management and integration in version control systems.## Latest News### Announcing the Composer & Packagist Sponsorship Program - Jul 30, 2026Today we are launching a formal sponsorship program for Composer and Packagist.org, together with new public sponsor pages on packagist.org/sponsor and getcomposer.org/sponsor. We want to start by tha...### Immutable Versions on Packagist - Jul 07, 2026This is the next post in our supply chain security series, following the supply chain security update and the Composer 2.10 release. Each post in this series covers a specific behavior worth understan...### Composer 2.10 Release - May 28, 2026We are excited to announce the release of Composer 2.10.0, introducing native malware filtering and consolidated future-proof customizable dependency policy configuration to control the handling of se...### An update on Composer & Packagist supply chain security - May 27, 2026The last months, and even more so the last weeks, saw an increasing amount of software supply chain attacks targeting open-source ecosystems. A handful of these have hit the PHP ecosystem too, via tak...### Composer 2.9.8 and 2.2.28 fix GitHub Actions token disclosure in error messages - May 13, 2026