PHPackages                             greg-1-anderson/core-recommended-dependencies - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Utility & Helpers](/categories/utility)
4. /
5. greg-1-anderson/core-recommended-dependencies

ActiveMetapackage[Utility & Helpers](/categories/utility)

greg-1-anderson/core-recommended-dependencies
=============================================

Locked core dependencies; require this project INSTEAD OF drupal/core.

8.7.6(6y ago)049GPL-2.0-or-later

Since Aug 24Pushed 6y ago1 watchersCompare

[ Source](https://github.com/greg-1-anderson/core-recommended-dependencies)[ Packagist](https://packagist.org/packages/greg-1-anderson/core-recommended-dependencies)[ RSS](/packages/greg-1-anderson-core-recommended-dependencies/feed)WikiDiscussions master Synced 2w ago

READMEChangelogDependencies (52)Versions (146)Used By (0)

drupal/core-recommended-dependencies
====================================

[](#drupalcore-recommended-dependencies)

This project is for use with a Composer-managed Drupal site. It is recommended that all Composer-managed Drupal sites use this project.

Require this project *instead of* the [drupal/core](https://github.com/drupal/core)subtree split in order to guarentee that all of the dependencies from `drupal/core` will be included in your Drupal site at exactly the same version that was tested with the version of Drupal you are currently using.

The consequences of *not* using this project is that Drupal's dependencies may "float up" to more recent versions than were tested with Drupal when you use Composer to upgrade your Drupal site. Occasionally, new dependency versions introduce bugs in Drupal. While these sorts of errors are usually corrected fairly quickly, it can still be quite disruptive to be one of the first people encountering one of these bugs. Using the recommended dependencies avoids this problem by only using dependency versions that have already been tested with Drupal.

Upgrading
---------

[](#upgrading)

When using this project, upgrade your Drupal site as follows:

```
$ composer update drupal/core-recommended-dependencies --with-dependencies

```

This will update `drupal/core` and any needed dependencies.

Running a simple `composer update` will also update `drupal/core`, all of Drupal's dependencies (to the correct tested versions), and all of your contrib modules and other dependencies.

References
----------

[](#references)

This project is derived from the original community project [webflo/drupal-core-strict](https://github.com/webflo/drupal-core-strict). It was generated from tools derived from [webflo/package-generator-drupal](https://github.com/webflo/package-generator-drupal)and [webflo/package-generator](https://github.com/webflo/package-generator).

###  Health Score

32

—

LowBetter than 69% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity8

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity77

Established project with proven stability

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~0 days

Total

145

Last Release

2502d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/b34cc6bd882277b6c6dda19bf6631ae5c3a909fd667c826a15121642cdc051b2?d=identicon)[greg.1.anderson](/maintainers/greg.1.anderson)

---

Top Contributors

[![greg-1-anderson](https://avatars.githubusercontent.com/u/612191?v=4)](https://github.com/greg-1-anderson "greg-1-anderson (2 commits)")

### Embed Badge

![Health badge](/badges/greg-1-anderson-core-recommended-dependencies/health.svg)

```
[![Health](https://phpackages.com/badges/greg-1-anderson-core-recommended-dependencies/health.svg)](https://phpackages.com/packages/greg-1-anderson-core-recommended-dependencies)
```

###  Alternatives

[drupal/core-recommended

Locked core dependencies; require this project INSTEAD OF drupal/core.

6941.5M398](/packages/drupal-core-recommended)[drupal/core

Drupal is an open source content management platform powering millions of websites and applications.

19664.8M1.6k](/packages/drupal-core)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

585.4M528](/packages/shopware-core)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.4M196](/packages/sulu-sulu)[sylius/sylius

E-Commerce platform for PHP, based on Symfony framework.

8.5k5.8M717](/packages/sylius-sylius)[matomo/matomo

Matomo is the leading Free/Libre open analytics platform

21.6k38.2k](/packages/matomo-matomo)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)