PHPackages                             eacg-gmbh/ecs-composer - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. eacg-gmbh/ecs-composer

ActiveLibrary

eacg-gmbh/ecs-composer
======================

Module for Composer allowing the transfer of package dependencies to ECS for further legal and vulnerability analysis. See https://ecs.eacg.de for a detailed service description.

1.0.1(8y ago)1161MITPHPPHP >=5.4

Since May 30Pushed 7y ago2 watchersCompare

[ Source](https://github.com/eacg-gmbh/ecs-composer)[ Packagist](https://packagist.org/packages/eacg-gmbh/ecs-composer)[ RSS](/packages/eacg-gmbh-ecs-composer/feed)WikiDiscussions master Synced 2d ago

READMEChangelogDependencies (4)Versions (3)Used By (0)

TrustSource (ECS) Composer Plugin
=================================

[](#trustsource-ecs-composer-plugin)

[![Latest Stable Version](https://camo.githubusercontent.com/633e02b9c016c3f00dfcd8ceb2285ec16e0ba6ca5eeea732d41c1e3ad47b6c81/68747470733a2f2f706f7365722e707567782e6f72672f656163672d676d62682f6563732d636f6d706f7365722f76657273696f6e)](https://packagist.org/packages/eacg-gmbh/ecs-composer)[![License](https://camo.githubusercontent.com/41defde36e865d58a3a3a38ecb09402fc72fb452a0d739b5ed177ebce45a0c28/68747470733a2f2f706f7365722e707567782e6f72672f656163672d676d62682f6563732d636f6d706f7365722f6c6963656e7365)](https://packagist.org/packages/eacg-gmbh/ecs-composer)

Composer module to transfer dependency information to TrustSource server (Open Source Compliance Solution). Find more information about TrustSource at

Requirements
============

[](#requirements)

- PHP >= 5.4
- composer/composer >= 1.4
- curl/curl >= 1.6
- league/climate >= 3.2

Installation
============

[](#installation)

Run: `composer require eacg-gmbh/ecs-composer`

Add `post-autoload-dump` script to the composer.json file to transfer dependency information right after `composer install`, `composer update` or `composer dumpautoload`:

```
"scripts": {
    "post-autoload-dump": [
        "EacgGmbh\\ECSComposer\\Application::postAutoloadDump"
    ]
}

```

To store your credentials for automated transfer you may create `.ecsrc.json` in your project directory or in your home directory to set credentials globally (not recommended!)

`.ecsrc.json` example:

```
{
  "userName": "UserName",
  "apiKey": "apiKey",
  "url": "url",
  "project": "Project Description"
}

```

Usage
=====

[](#usage)

You also may initiate transfer to [TrustSource](https://www.trustsource.io) server manually by executing following command via terminal:

```
./vendor/bin/ecs-composer
./vendor/bin/ecs-composer -u userName -k apiKey -p Project
./vendor/bin/ecs-composer -c config.json

```

```
Usage: ./bin/ecs-composer [-k apiKey, --apiKey apiKey] [-c config, --config config] [--help]
       [-p project, --project project] [--url url] [-u userName, --userName userName] [-v, --version]

Optional Arguments:
	-u userName, --userName userName
		UserName
	-k apiKey, --apiKey apiKey
		apiKey
	-p project, --project project
		project name
	--url url
		url
	-c config, --config config
		config path
	--help
		Prints a usage statement
	-v, --version
		Prints a version

```

###  Health Score

27

—

LowBetter than 49% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity8

Limited adoption so far

Community12

Small or concentrated contributor base

Maturity59

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 53.3% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~17 days

Total

2

Last Release

3253d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/0ce4352c50ae8a66c82c9a0a3be391460f74bec88b4d28b41913c2d7450e9e1e?d=identicon)[prizrack13](/maintainers/prizrack13)

![](https://www.gravatar.com/avatar/dc9e59c7d58cba12787e621a8de02841f459907b0ea6f38254c9eb95bf916658?d=identicon)[EACG](/maintainers/EACG)

---

Top Contributors

[![jthDEV](https://avatars.githubusercontent.com/u/20836127?v=4)](https://github.com/jthDEV "jthDEV (8 commits)")[![Prizrack13](https://avatars.githubusercontent.com/u/3438127?v=4)](https://github.com/Prizrack13 "Prizrack13 (7 commits)")

---

Tags

composertrustsourceplugincomposerpackageopensourcedependency-analysis

###  Code Quality

TestsPHPUnit

### Embed Badge

![Health badge](/badges/eacg-gmbh-ecs-composer/health.svg)

```
[![Health](https://phpackages.com/badges/eacg-gmbh-ecs-composer/health.svg)](https://phpackages.com/packages/eacg-gmbh-ecs-composer)
```

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)