PHPackages                             phar-io/mediator - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [DevOps & Deployment](/categories/devops)
4. /
5. phar-io/mediator

ActiveComposer-plugin[DevOps & Deployment](/categories/devops)

phar-io/mediator
================

Deploy phars via composer

1.0.0(5y ago)343MITPHPPHP ^7.2 || ~8.0.0

Since Oct 13Pushed 5y ago1 watchersCompare

[ Source](https://github.com/phar-io/mediator)[ Packagist](https://packagist.org/packages/phar-io/mediator)[ RSS](/packages/phar-io-mediator/feed)WikiDiscussions sharp-matthew Synced 2d ago

READMEChangelog (2)Dependencies (3)Versions (7)Used By (0)

Mediator
========

[](#mediator)

This is a template project to create a Composer plugin that installs a PHAR file instead of a sh\*tload of sourcecode

Usage
-----

[](#usage)

Create your own copy of this project by running and following the instructions.

```
$ composer create-project phar-io/mediator /path/to/your/source/path
```

### Adding your public signing keys

[](#adding-your-public-signing-keys)

If you are signing your releases you can add the public key to your plugin. Export your public key like this.

```
$ gpg --export -a mykey > keys/mykey.key
```

This will export the key with the ID `mykey` into a file `mykey.key` inside the `keys` directory.

You can add more than one key to that keys-folder and each of the keys will be used to check for a verification for the signature. So for projects that have more than one person signing builds you can add all their public keys to this folder.

Replacements
------------

[](#replacements)

You can use different variables within the URLs that will be replaced with the values from the current tag of the plugin. Note that this only works when your versions follow [SemanticVersioning](https://semver.org)

To make it more visible: Let's assume we have a tag 1.2.3-RC04+build567

- *%version%* will be replaed with the full version constraint, *1.2.3-RC4+build567* from the example
- *%major%* will be replaced with the major version, *1* from the example
- *%minor%* will be replaced with the minor version, *2* from the example
- *%patch%* will be replaced with the patch version, *3* from the example
- *%release%* will be replaced with the release version, *RC04* from the example
- *%build%* will be replaced with the build version, *build567* from the example

###  Health Score

29

—

LowBetter than 60% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity11

Limited adoption so far

Community11

Small or concentrated contributor base

Maturity63

Established project with proven stability

 Bus Factor1

Top contributor holds 55% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~41 days

Total

5

Last Release

1873d ago

Major Versions

0.6.0 → 1.0.02021-03-27

PHP version history (2 changes)0.1.1PHP ^7.4 || ~8.0.0

1.0.0PHP ^7.2 || ~8.0.0

### Community

Maintainers

![](https://www.gravatar.com/avatar/5ae5183aaad2bc7453230704bd6991dc6ccbcd6e775c6a29efdc94350a69f247?d=identicon)[heiglandreas](/maintainers/heiglandreas)

![](https://www.gravatar.com/avatar/0fc8fe1ac311fb26137cc3b26cd6c1bbb58c9ac4f287eb9d8242a741cef9a502?d=identicon)[theseer](/maintainers/theseer)

![](https://www.gravatar.com/avatar/86793722fa38096ae6ecef594df71fc85a6360fd63a3b1a6ef8c374d3d093f04?d=identicon)[sebastianfeldmann](/maintainers/sebastianfeldmann)

---

Top Contributors

[![heiglandreas](https://avatars.githubusercontent.com/u/91998?v=4)](https://github.com/heiglandreas "heiglandreas (11 commits)")[![sebastianfeldmann](https://avatars.githubusercontent.com/u/9250358?v=4)](https://github.com/sebastianfeldmann "sebastianfeldmann (9 commits)")

### Embed Badge

![Health badge](/badges/phar-io-mediator/health.svg)

```
[![Health](https://phpackages.com/badges/phar-io-mediator/health.svg)](https://phpackages.com/packages/phar-io-mediator)
```

###  Alternatives

[johnpbloch/wordpress-core-installer

A custom installer to handle deploying WordPress with composer

22110.8M47](/packages/johnpbloch-wordpress-core-installer)[civicrm/composer-compile-plugin

Define a 'compile' event for all packages in the dependency-graph

12488.2k15](/packages/civicrm-composer-compile-plugin)[enumag/no-thanks

Prevents symfony/flex from printing thanks reminder.

3315.6k](/packages/enumag-no-thanks)[inpsyde/vip-composer-plugin

A Composer plugin to ease deployment to wordpress.com VIP servers alongside Composer-based development.

1258.2k](/packages/inpsyde-vip-composer-plugin)[stephank/composer-plugin-nixify

Composer plugin to help with Nix packaging

1710.5k](/packages/stephank-composer-plugin-nixify)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)