PHPackages                             pamald/pamald-composer - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Utility & Helpers](/categories/utility)
4. /
5. pamald/pamald-composer

ActiveLibrary[Utility & Helpers](/categories/utility)

pamald/pamald-composer
======================

Collects lock diff information from composer.lock files.

1.x-dev(7mo ago)001LGPL-2.0-or-laterPHPPHP >=8.3

Since Oct 12Pushed 7mo ago1 watchersCompare

[ Source](https://github.com/pamald/pamald-composer)[ Packagist](https://packagist.org/packages/pamald/pamald-composer)[ Docs](https://github.com/pamald/pamald)[ RSS](/packages/pamald-pamald-composer/feed)WikiDiscussions 1.x Synced 1mo ago

READMEChangelogDependencies (18)Versions (1)Used By (1)

pamald Composer
===============

[](#pamald-composer)

[![CircleCI](https://camo.githubusercontent.com/09b1bab3327f8524abc27f14940ba722b4db73c55497406bc9719b3e163ef68f/68747470733a2f2f636972636c6563692e636f6d2f67682f70616d616c642f70616d616c642d636f6d706f7365722f747265652f312e782e7376673f7374796c653d737667)](https://circleci.com/gh/pamald/pamald-composer/?branch=1.x)[![codecov](https://camo.githubusercontent.com/3b8d426e2d5abb0135b1162fcb269456175d1120007c7ca4f079f96c8cb3a3de/68747470733a2f2f636f6465636f762e696f2f67682f70616d616c642f70616d616c642d636f6d706f7365722f6272616e63682f312e782f67726170682f62616467652e7376673f746f6b656e3d48534631364f47507972)](https://app.codecov.io/gh/pamald/pamald-composer/branch/1.x)

**pamald-composer** is a PHP library that collects dependency information from `composer.lock` files. It is the Composer-specific implementation of the [pamald/pamald](https://github.com/pamald/pamald) project, enabling detailed analysis of Composer packages, PHP versions, PHP extensions, and APIs.

Project Goals
-------------

[](#project-goals)

The library aims to collect and analyze Composer project dependencies from `composer.lock` and `composer.json` files in a structured way. This is particularly useful for:

- **Tracking dependency changes**: Easily identify package updates, new dependencies, or removed packages
- **Security audits**: Quick overview of package versions in use
- **CI/CD pipelines**: Automated dependency analysis during build processes
- **Documentation**: Generate accurate dependency lists for projects
- **Environment requirement verification**: Identify PHP version and extension requirements
- **Prepare Git Commit Message**: Automatically generate a commit message with dependency information

Why is it Useful?
-----------------

[](#why-is-it-useful)

### 1. Comprehensive Dependency Information

[](#1-comprehensive-dependency-information)

The library collects not only packages, but also:

- **PHP core version** requirements
- **PHP extensions** (ext-\*)
- **API dependencies** (e.g., composer-plugin-api)
- **Distinguishes between direct and transitive dependencies**
- **Groups by production and development environments**

### 2. Structured Data Model

[](#2-structured-data-model)

Each dependency type has a dedicated class:

- `Platform` - PHP version and extension requirements
- `ApiDependency` - API dependencies
- `PackageDependency` - Composer packages

### 3. Integration with the pamald Ecosystem

[](#3-integration-with-the-pamald-ecosystem)

The library implements the [pamald/pamald](https://github.com/pamald/pamald) base library interfaces, making it easily integrable with other pamald tools (npm, yarn) and Robo tasks.

Usage
-----

[](#usage)

```