PHPackages                             pantheon-systems/upstream-management - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [DevOps & Deployment](/categories/devops)
4. /
5. pantheon-systems/upstream-management

ActiveComposer-plugin[DevOps & Deployment](/categories/devops)

pantheon-systems/upstream-management
====================================

Composer plugin that holds a series of scripts to manage upstreams in Pantheon

1.0.1(2y ago)1545.8k↑35.1%6[3 issues](https://github.com/pantheon-systems/upstream-management/issues)[13 PRs](https://github.com/pantheon-systems/upstream-management/pulls)MITPHPCI passing

Since Feb 16Pushed 1w ago6 watchersCompare

[ Source](https://github.com/pantheon-systems/upstream-management)[ Packagist](https://packagist.org/packages/pantheon-systems/upstream-management)[ RSS](/packages/pantheon-systems-upstream-management/feed)WikiDiscussions main Synced 4d ago

READMEChangelog (2)Dependencies (6)Versions (26)Used By (0)

Pantheon Upstream Management
============================

[](#pantheon-upstream-management)

This package provides a series of scripts to be used to manage upstreams in [Pantheon](https://pantheon.io).

Installation
------------

[](#installation)

Install it as usual with composer:

```
composer require pantheon-systems/upstream-management

```

It will prompt you to authorize the plugin, please do so.

Usage
-----

[](#usage)

This plugin provides two commands to be used by custom upstreams:

### upstream:require

[](#upstreamrequire)

Use it to require dependencies in your upstream-configuration folder.

```
composer upstream-require drupal/ctools

```

### upstream:update-dependencies

[](#upstreamupdate-dependencies)

Use it to use version locked dependencies in your upstream (and to update those versions). This way you can pin the versions for your upstream dependencies.

```
composer upstream:update-dependencies

```

Development
-----------

[](#development)

### Requirements

[](#requirements)

- PHP 8.1+
- Composer 2.9+

### Setup

[](#setup)

```
composer install
```

### Running tests

[](#running-tests)

```
# Run coding standards check
composer cs

# Run functional tests
composer test
```

Releasing
---------

[](#releasing)

This package is published on [Packagist](https://packagist.org/packages/pantheon-systems/upstream-management) and updated automatically when a new GitHub release is created.

1. Update `composer.json` if needed
2. Create a new GitHub release with a semver tag (e.g. `v2.3.4`)
3. Packagist picks up the new release automatically via webhook

###  Health Score

43

—

FairBetter than 89% of packages

Maintenance44

Moderate activity, may be stable

Popularity41

Moderate usage in the ecosystem

Community20

Small or concentrated contributor base

Maturity56

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 71.4% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~376 days

Total

2

Last Release

858d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/5a89f5f15357797cbd6ec7833a28626478ae3c0ceb5fa1faa8a26d0960584c65?d=identicon)[pantheon-systems](/maintainers/pantheon-systems)

![](https://avatars.githubusercontent.com/u/2217820?v=4)[Kevin Porras](/maintainers/kporras07)[@kporras07](https://github.com/kporras07)

---

Top Contributors

[![kporras07](https://avatars.githubusercontent.com/u/2217820?v=4)](https://github.com/kporras07 "kporras07 (25 commits)")[![namespacebrian](https://avatars.githubusercontent.com/u/87093053?v=4)](https://github.com/namespacebrian "namespacebrian (4 commits)")[![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4)](https://github.com/dependabot[bot] "dependabot[bot] (2 commits)")[![TohaUA](https://avatars.githubusercontent.com/u/4780023?v=4)](https://github.com/TohaUA "TohaUA (2 commits)")[![greg-1-anderson](https://avatars.githubusercontent.com/u/612191?v=4)](https://github.com/greg-1-anderson "greg-1-anderson (1 commits)")[![vikol-pantheon](https://avatars.githubusercontent.com/u/227214240?v=4)](https://github.com/vikol-pantheon "vikol-pantheon (1 commits)")

###  Code Quality

TestsPHPUnit

Code StylePHP\_CodeSniffer

### Embed Badge

![Health badge](/badges/pantheon-systems-upstream-management/health.svg)

```
[![Health](https://phpackages.com/badges/pantheon-systems-upstream-management/health.svg)](https://phpackages.com/packages/pantheon-systems-upstream-management)
```

###  Alternatives

[phpro/grumphp

A composer plugin that enables source code quality checks.

4.3k16.7M1.0k](/packages/phpro-grumphp)[symfony/runtime

Enables decoupling PHP applications from global state

74798.8M1.0k](/packages/symfony-runtime)[drupal/core-composer-scaffold

A flexible Composer project scaffold builder.

5445.2M565](/packages/drupal-core-composer-scaffold)[johnpbloch/wordpress-core-installer

A custom installer to handle deploying WordPress with composer

21911.3M51](/packages/johnpbloch-wordpress-core-installer)[roots/wordpress-core-installer

A Composer custom installer to handle installing WordPress as a dependency

4216.6M51](/packages/roots-wordpress-core-installer)[drupal/core-project-message

Adds a message after Composer installation.

2124.7M203](/packages/drupal-core-project-message)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)