Tag.index

#Composer

Posts tagged Composer.

Posts

May 27, 2026 / Software

Composer and Packagist Are Hardening the PHP Supply Chain: What to Expect Next

The recent Packagist and Composer security update matters because it moves the PHP ecosystem away from best-effort trust and toward stronger release controls, malware filtering, and immutable versions.

#Security #Supply Chain #Composer #Php #Developer Tools

May 22, 2026 / Software

Laravel-Lang and the Composer Tag-Rewrite Supply Chain Attack

The Laravel-Lang compromise showed how dangerous mutable tags and Composer autoload execution can become when attackers gain push access to a package namespace.

#Security #Supply Chain #Laravel #Php #Composer