PHPackages silpion/composer-checker - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Utility & Helpers](/categories/utility) 4. / 5. silpion/composer-checker AbandonedArchivedLibrary[Utility & Helpers](/categories/utility) silpion/composer-checker ======================== Tool for checking composer configurations. v0.3.0(11y ago)122.0k[1 issues](https://github.com/silpion/composer-checker/issues)MITPHP Since Mar 21Pushed 11y ago1 watchersCompare [ Source](https://github.com/silpion/composer-checker)[ Packagist](https://packagist.org/packages/silpion/composer-checker)[ RSS](/packages/silpion-composer-checker/feed)WikiDiscussions master Synced yesterday READMEChangelog (4)Dependencies (2)Versions (5)Used By (0) [![Build Status](https://camo.githubusercontent.com/0f9996a1dde22af3ef7b99cc79717cdf090c8b950583b01303e007dd5a26a6c8/68747470733a2f2f7472617669732d63692e6f72672f73696c70696f6e2f636f6d706f7365722d636865636b65722e7376673f6272616e63683d6d6173746572)](https://travis-ci.org/silpion/composer-checker) Composer Checker ================ [](#composer-checker) A simple tool for various composer related checks and validations. Usage ----- [](#usage) ``` $ php bin/composer-checker Available commands: help Displays help for a command list Lists commands check check:dist Matching the dist urls in a composer.lock file against some patterns. check:src Matching the src urls in a composer.lock file against some patterns. remove remove:dist Removing dist urls from a composer.lock file. remove:src Removing src urls from a composer.lock file. ``` Check: Dist-Urls ---------------- [](#check-dist-urls) This check is intended to validate the dist-urls in a composer.lock file. When using a Satis Mirror for your packages, it might break your ci/deployment when external dist-urls are used in your composer.lock file. Simply run this command to check against the url "satis.example.com": ``` $ php bin/composer-checker check:dist -p "satis.example.com" composer.lock --- Invalid urls found --- +-----------------+-----------------------------------------------------------------------------------------------+ | Package | Dist-URL | +-----------------+-----------------------------------------------------------------------------------------------+ | symfony/console | https://api.github.com/repos/symfony/Console/zipball/00848d3e13cf512e77c7498c2b3b0192f61f4b18 | +-----------------+-----------------------------------------------------------------------------------------------+ ``` The output gives a hint, which packages do not comply with the given url pattern, which is basically just a regex. A positive example with a more complex regex: ``` $ php bin/composer-checker check:dist -p "^https://api.github.com/repos/(.+)/(.+)/zipball/([a-f0-9]+)$" composer.lock All urls valid. ``` It is also possible to enforce to use only "https" dist-urls with a pattern like this: ``` $ php bin/composer-checker check:dist -p "^https://" composer.lock ``` Allowing empty or missing dist urls can be done with the `--allow-empty` switch. Check: Source-Urls ------------------ [](#check-source-urls) Parallel to the dist urls, the source urls can be checked too. ``` $ php bin/composer-checker check:src -p "git@git.example.com/foo.git" composer.lock ``` Allowing empty or missing source urls can be done with the `--allow-empty` switch. Remove: Dist-Urls ----------------- [](#remove-dist-urls) This command will remove distribution urls from a given `composer.lock` file. Forcing composer to install all packages from "source". It is possible to `--except` specific patterns like "jquery.com". These urls will *not* be removed. ``` php bin/composer-checker remove:dist -e jquery.com composer.lock ``` Remove: Source-Urls ------------------- [](#remove-source-urls) Working the same as the `remove:dist` counterpart. Removing the "source" entries from a given `composer.lock` file. ``` php bin/composer-checker remove:src -e jquery.com composer.lock ``` This command can be very useful for automated deploying. Because if a package mirror like Satis, holding "dist" copies, is not available, composer will silently fail back to using "source" packages creating a unnoticed dependency between production and the VCS. Removing all the "source" entries from a composer.lock file, will force composer to only use the "dist" urls or stop with a failure. LICENSE ------- [](#license) The license can be found here: [LICENSE](LICENSE) ### Health Score 29 — LowBetter than 60% of packages Maintenance18 Infrequent updates — may be unmaintained Popularity22 Limited adoption so far Community8 Small or concentrated contributor base Maturity56 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~64 days Total 4 Last Release 4242d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/0ce109f0fc05421b5db21c1f35e9ff78be9bae38f5b6e3bd6121f2eb2417cf53?d=identicon)[h4cc](/maintainers/h4cc) ![](https://www.gravatar.com/avatar/b9a1b09bdffd2735e5cbcf68a066330fb0b6fb7cab0eaa5ee04fa4bb39e2a4aa?d=identicon)[silpion](/maintainers/silpion) --- Top Contributors [![h4cc](https://avatars.githubusercontent.com/u/2981491?v=4)](https://github.com/h4cc "h4cc (14 commits)") --- Tags composercheckconfigdependencies ### Embed Badge ![Health badge](/badges/silpion-composer-checker/health.svg) ``` [![Health](https://phpackages.com/badges/silpion-composer-checker/health.svg)](https://phpackages.com/packages/silpion-composer-checker) ``` ### Alternatives [icanhazstring/composer-unused Show unused packages by scanning your code 1.7k7.0M188](/packages/icanhazstring-composer-unused)[composer/satis Simple Repository Generator 3.3k1.4M17](/packages/composer-satis)[franzl/studio Develop your Composer libraries with style 1.1k634.5k15](/packages/franzl-studio)[clue/phar-composer Simple phar creation for any project managed via Composer 862881.6k29](/packages/clue-phar-composer)[jbzoo/composer-graph Render composer.json + composer.lock dependencies graph 66741.6k2](/packages/jbzoo-composer-graph)[sllh/composer-versions-check Checks if packages are up to date to last major versions after update 2352.4M16](/packages/sllh-composer-versions-check) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)