2026-10-29 10:19 UTC
Composer 2.11 is out 🚀 cooldown dependency policies hold back freshly published package versions for an hour or a day, so compromised releases can be flagged before they reach your composer update.
Composer 2.11 includes several security fixes, block-scope support for custom dependency policies, OSC 7501 terminal progress reporting and faster and more memory efficient dependency resolution.
Full blog post: https://blog.packagist.com/composer-2-11-release/
#php #phpc #composerphp #supplychainsecurity
Replies (0)
No replies.