composer - Allur

01

Programing Jul 24, 2026 • 7 min read

PHP Version Adoption Crisis: The 2026 Ecosystem Modernization Debate

A July 2026 report reveals a critical PHP version adoption crisis, sparking debate. Maintainers propose raising Composer requirements to force modernization, ensuring security and performance.

02

Programing Jul 05, 2026 • 6 min read

phpm: A Rust-powered 'pnpm' Layer Revolutionizing Composer Dependency Management

Discover phpm, a Rust-based Composer wrapper bringing pnpm-style content-addressable storage and symlinking to PHP, drastically improving performance and disk usage for large-scale projects and monore...

03

Programing Jun 19, 2026 • 6 min read

Composer 2.10: Fortifying PHP with Native Malware Filtering and Security Policies

A deep dive into Composer 2.10's landmark security update. We analyze the new native malware filtering and dependency policy framework.

04

Programing May 30, 2026 • 8 min read

The Silent Saboteur: Analyzing the Laravel-Lang Supply Chain Attack

A deep dive into the sophisticated GitHub tag hijacking attack that compromised 700+ Laravel-Lang versions, injecting credential-stealing backdoors into the PHP ecosystem.

05

Programing May 13, 2026 • 6 min read

Critical Security Update: Composer Patches Remote Code Execution Vulnerabilities

Composer has released urgent patches for two high-severity RCE vulnerabilities (CVE-2026-40176, CVE-2026-40261). Here is how to secure your dev environment and CI/CD pipelines.

#composer

PHP Version Adoption Crisis: The 2026 Ecosystem Modernization Debate

phpm: A Rust-powered 'pnpm' Layer Revolutionizing Composer Dependency Management

Composer 2.10: Fortifying PHP with Native Malware Filtering and Security Policies

The Silent Saboteur: Analyzing the Laravel-Lang Supply Chain Attack

Critical Security Update: Composer Patches Remote Code Execution Vulnerabilities