Together with PyPI, Maven Central, cratesio and other major package registries we signed a statement on sustainable open source infrastructure. 3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs. #phpc #php

Registries like PyPI, Maven Central & crates.io power the ecosystem. They can’t run on goodwill alone. OpenSSF endorses the Joint Statement on Sustainable Stewardship. 👉 openssf.org/blog/2025/09... #PreserveOpenSource

🚨 Warning to #PHP package maintainers: We did not email you to change your passwords & 2FA. Emails asking you to update your credentials are a phishing attempt. We had the phishing site & domain taken down. If you got the email and entered your credentials, please contact us. #phpc

Someone on the AWS billing team is stupid like a fox.

Homebrew Project Leader, maintainer for 16 years, Ruby lover 👋. I having calls with both sides and trying to help reach a mutually acceptable solution. If you'd like to join one of these calls or chat 1:1: gimme an email from /about on my website. If not (I'd 100% understand) thanks for your work <3

🚨 PSA for #PHP package maintainers: DO NOT REPLACE tags! If you messed up a release simply do another. No matter how quickly you notice a mistake, automatic tools already pulled the original tag, triggered automatic updates. Users will never know you recreated the tag and use the broken state. #phpc

Wishing a very happy birthday to @naderman.de at #APIPlatformCon! What a perfect place to celebrate 🎂

Had a great time presenting Composer Best Practices for 2025 at #APIPlatformCon in Lille this morning. Meet me at our booth, I'd love to hear all about how you work with #composerphp! #php #phpc #supplychainsecurity #symfony #apiplatform

Thinking once more it can't be a coincidence that Point of Sale and Piece of Shit use the same abbreviation 🙄

Would you like to attend #APIPlatformCon 2025 in Lille on Sep 18/19 or online? Private Packagist is sponsoring: 4 tickets to give away! Part of a group underrepresented at tech conferences, or can't afford a ticket? Repost and reply favorite PHP package(s) #php #composerphp #phpc

The era of Composer v1 finally comes to an end, long live Composer v2! 👑 Today packagist.org support for v1 metadata has been shut down as announced last year. blog.packagist.com/packagist-or... #composerphp #phpc #php

August update: dependency usage tracking across your packages, automatic GitLab token rotation, and Conductor improvements with custom labels and smarter PR handling blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

🙌 Remembering Ryan Weaver: Teacher, Core Team Member, Friend ➡️ https://symfony.com/blog/remembering-ryan-weaver-teacher-core-team-member-friend

Arrived in Denver for #Laracon - look forward to meeting everyone at our @packagist.com booth! Would love to talk to everyone about how you use Composer, handle updates and apply security patches, or anything else relating to dependency management! #laraconus #laravel #phpc

🚀 Kicking off the Symfony AI Initiative ➡️ https://symfony.com/blog/kicking-off-the-symfony-ai-initiative

🚨 Packagist.org shutdown of Composer 1.x support postponed to September 1st, 2025. Act now, upgrade to Composer 2! Last resort: check out Private Packagist extended 1.x support if you really cannot migrate right now. blog.packagist.com/packagist-or...

Autos in der Innenstadt genießen keinen Verfassungsrang.

What's a time tracking process that works for you? I regularly for get to end or switch what I'm tracking, despite it being pretty easy and on web as well as my phone. What tools do you prefer and how did you fix this problem? Are there analogue devices that help keep this present at all times?

We'll publish all PHPverse 2025 talks as separate videos in the coming days! www.youtube.com/watch?v=k-Uw...

Had a great time hosting #PHPVerse - 30 years of PHP! Thanks @brendt.bsky.social and thanks for letting me quiz you 😉 @dunglas.dev @nicolasgrekas.bsky.social @marcelpociot.bsky.social Cheuk @taylorotwell.bsky.social @jeffreyway.bsky.social Povilas @zenstruck.com @pronskiy.bsky.social Gina #phpc #php

Study on London 20 mph limits shows: - collisions ⬇️ 35% - casualties ⬇️ 36% - fatal/serious injuries ⬇️ 34% - child casualties ⬇️ 46% - child deaths ⬇️ 75% - walkers, cyclists, motorcyclists killed/seriously injured ⬇️ 28% etsc.eu/20mph-limits...

I'm super excited because next week is PHPverse!! We're setting up a Discord server for people to connect and mingle during the day, and also to handle our Q&A. Is anyone interested in joining early? #php30

The joys of riding a bike through Berlin: Driver honked at me from behind when I had to move further into the lane because the bike lane ends and parked cars take up its space. Got off to ask why he honked, so he ran over my bike that I'm still standing over, as I took this pic of him speeding away.

„… so der Plan, an den sich keiner hält.“ In dem Halbsatz liegt das ganze Berliner Problem. Wieso bekommt London mit viel engeren innerstädtischen Straßen das geregelt? Weil „hält sich keiner dran“ nicht als gottgegeben akzeptiert, sondern dagegen was getan wird. www.tagesspiegel.de/berlin/nun-d...

Meet @igorbenko.bsky.social and me at IPC in Berlin today & tomorrow at our @packagist.com booth. 👋 Would love to chat about Composer, supply chain security, dependencies, or show you our new tool Conductor! Don't forget to pick up a Composer sticker 😉 #php #phpc #composerphp #ipc #ipc2025

Will you be in Amsterdam June 17th, or can you make it there? Join us to celebrate PHP turning 30 after #phpverse at Café Restaurant Dauphine with @amsterdamphp.bsky.social from 6:30pm - RSVP www.meetup.com/amsterdamphp... #php #phpc

🚨 #APIPlatformCon Speaker reveal! Meet @naderman.de, best known as the co-creator of Composer and Private Packagist. Don’t miss his talk on mastering Composer in 2025, packed with practical tips and deep insights for PHP developers of all levels: api-platform.com/con/2025/

Really excited sponsor LaraconUS with @packagist.com - So exciting to see the @laravel.com team really pushing the entire Laravel ecosystem forward and everyone in the Laravel community advancing #PHP! Get a ticket while they're discounted and meet us at our booth in Denver in July!

May update: Progress on Conductor, expiring API credentials, stronger account protection, improved user profile/settings UX & performance boosts! Details: blog.packagist.com/whats-new-in... #php #composer #composerphp #phpc

exactly. in an industry where DRY is an axiom, does every fuckin REST API client need to be lovingly handcrafted?

Was a pleasure to speak at @symfony.com Live Berlin last week, here are the slides for my talks "Composer Guide to Supply Chain Security" naderman.de/slippy/slide... and the lightening talk "composer.lock demystified" naderman.de/slippy/slide... #php #phpc #symfony #composerphp

The PHP Foundation's 2024 Transparency & Impact Report is out! Learn about our work to support PHP's future. Read more: thephp.foundation/blog/2025/03...

Can only confirm how much of a problem this is ...

I'm working with the PHP Foundation to create a new page on the PHP site: "Why use PHP today?" I'd love your input on who needs this page, and what they need to hear: gist.github.com/mattstauffer...

Wozu ist der Gehweg da? Zum Parken, beschloss jetzt der Bundesrat auf Antrag von Bremens regierenden Blechlobbyisten. Es gibt zwar auch Positives zu Zebrastreifen und Tempo 30 vor Schulen. Aber der Park-Skandal bleibt. Städte - gebt Menschen Raum, nicht toten Kisten! www.fuss-ev.de/blog/aktuell...

Thanks for all the kind feedback on my supply chain security for #composerphp talk, was a great experience speaking at #phpuk - hope a lot of you sign up for Conductor and try it out when available! #php #phpuk25

I read online about how some women in STEM bios are being deleted from websites "to comply with the new regulations". And I have thoughts. Many thoughts. I wrote some of them down, as I do when I need to process something. Have a read. www.zuzana-k.com/articles/rep...

Our deploy pipeline never sleeps! Here are all the improvements to Private Packagist over the last months: We added support for PIE, streamlined our GitHub sync and made it easier to track your setup progress, more on our blog: blog.packagist.com/whats-new-in... #composerphp #composer #php #phpc

Der schönste #Steuertrick heißt Gefangenenfreikauf!

Sponsor Announcement 🚨 We’re excited to welcome @packagist.com as a Silver Sponsor for PHP UK Conference 2025! Plus, don’t miss co-founder @naderman.de as he takes the stage with his talk "Composer Guide to Supply Chain Security" #phpuk25 #phpuk #php #phpc #composer

Going to give a talk on #composerphp internals at the #LaraconEU in conference at 2:20pm after lunch! Come join me for a quick look into architecture, boolean algebra and computational complexity theory! 😁 #laracon #laravel

Discover how Composer, packagist.org, and Private Packagist manage PHP dependencies. In Nils' (@naderman.de) talk, learn to identify and secure your dependencies for a reliable application. Join us at PHP UK Conference 🎟️ https://buff.ly/40zcJOr #phpuk25 #phpuk #php #phpc #cybersecurity

Stop by our @packagist.com booth at #LaraconEU and have a chat about Composer, Packagist, Conductor or anything else relating to dependency management and supply chain security! #Laravel #Laracon

On the way to #LaraconEU in Amsterdam, I met @naderman.de by chance on the Eurostar. It's always a joy to see familiar faces. Come to him, he has new Composer/Packagist features that are well worth a visit to its booth tomorrow.

Great overview of security pitfalls in GitHub Actions that should be required viewing for anyone working with GHA by @yossarian.net - read the detailed slides at fosdem.org/2025/schedul... #FOSDEM

Morgen besteht zum letzten Mal in dieser Legislatur die Möglichkeit für Abschaffung der Gefängnisstrafen wegen Fahren ohne Ticket in Bus und Bahn. Jetzt oder nie!

Heading to #FOSDEM in Brussels this weekend for the first time in 10 years! Who'd like to meet up? Recommendations which sessions I should go see? It's always so much!

#RIPnatenom Vor einem Jahr wurde der Fahrradaktivist Andreas Mandalka von einem Autofahrer überfahren und getötet. Unter dem Namen #Natenom hatte er in den Sozialen Medien oft zu geringe Überholabstände kritisiert und dokumentiert. Gemeinsame Gedenkahrt in Berlin am 2. Februar. #StopKillingCyclists