Composerthe right way
@rdohms
Rafael Dohms

photo: smileymanwithahat

photo: Rob Allen

photo: 18millionpixels

Library Publisher
photo: 18millionpixels

Library Publisher
Library Consumer
photo: 18millionpixels

Library Publisher
Library
Library Consumer
photo: 18millionpixels

Library Publisher
Library
Library Consumer
Packagist
photo: 18millionpixels

photo: 18millionpixels

{
"require": {
"monolog/monolog": “2.0”
}
}
photo: 18millionpixels

{
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
photo: 18millionpixels

{
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
photo: 18millionpixels

{
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
___
~1.1
photo: 18millionpixels

{
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
- Installing psr/log (1.0.0)
Loading from cache
- Installing monolog/monolog (1.11.0)
Downloading: 100%
monolog/monolog suggests installing graylog2/gelf-php (Allow sending log messages to a GrayLog2 server)
[...]
monolog/monolog suggests installing ext-mongo (Allow sending log messages to a MongoDB server)
monolog/monolog suggests installing aws/aws-sdk-php (Allow sending log messages to AWS services like DynamoDB)
monolog/monolog suggests installing rollbar/rollbar (Allow sending log messages to Rollbar)
Writing lock file
Generating autoload files
___
~1.1
photo: 18millionpixels

composer

composercomposer.json

composercomposer.json
composer.lock

composercomposer.json
composer.lock

discovery Packagist
composercomposer.json
composer.lock

discovery sourcePackagist Repository
composercomposer.json
composer.lock

discovery source
installation
Packagist
Vendor
Folder
Repository
composercomposer.json
composer.lock

$ composer init
Library Publisher

$ composer init
Library Publisher
$ composer require <vendor>/<package>
Library Consumer

$ composer require monolog/monolog
Tip

$ composer require monolog/monolog
Tip
Using version ~1.11 for monolog/monolog

Release the @DOHMSRAKEN!!
photo by @rosstuck

Library Publishers
Composer for

Library Publisher Unique vendor names
vendor / package

Library Publisher Unique vendor names
pick your own
unique vendor

Library Publisher Unique vendor names
or join a collective

README
CHANGELOG
LICENSE
Library Publisher What’s in your library?

README
CHANGELOG
LICENSE
Library Publisher What’s in your library?
What problem does it solve?
Usage examples
Install instructions
How can I contribute?

README
CHANGELOG
LICENSE
Library Publisher What’s in your library?
List relevant changes
Make BC breaks prominent
Show examples of how to upgrade
What problem does it solve?
Usage examples
Install instructions
How can I contribute?

README
CHANGELOG
LICENSE
Library Publisher What’s in your library?
List relevant changes
Make BC breaks prominent
Show examples of how to upgrade
Pick one that reflects your values
choosealicense.com can help
What problem does it solve?
Usage examples
Install instructions
How can I contribute?

Library Publisher Semantic Versioning
1 . 2 3.major minor patch

Library Publisher Semantic Versioning
1 . 2 3.major minor patch
Bug Fixes

Library Publisher Semantic Versioning
1 . 2 3.major minor patch
New Features Bug Fixes

Library Publisher Semantic Versioning
1 . 2 3.major minor patch
API / BC
Breaks
New Features Bug Fixes

Library Publisher Tagging
Tag it and Bag it

Library Publisher Tagging
# Simple Tag
$ git tag v1.2.3
# Annotated Tag
$ git tag -a v1.2.3 -m “Description of Release"

Library Publisher “I'm out"
photo: jilliancorinne

Library Publisher “I'm out"

Library Publisher “I'm out"
Click here and provide another

Library Publisher “I'm out"

Library Publisher “I'm out"

Pick the
correct
version
Library Publisher Pick a Version

*the asterisk
Library Publisher Pick a Version

*the asterisk○Library Publisher Pick a Version

~the tilde
Library Publisher Pick a Version

~1.2
>=1.2.0, <2.0.0
Library Publisher Pick a Version

~1.2
>=1.2.0, <2.0.0
Library Publisher Pick a Version

~1.2.3
>=1.2.3, <1.3
Library Publisher Pick a Version

~1.2.3
>=1.2.3, <1.3
Library Publisher Pick a Version

"require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application

"require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application

"require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application

"require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application
~2.1

Yo @rdohms, I’m
really happy for you and
I’m gonna let you finish, but
the tilde operator is
totally old news.

^the caret
Library Publisher Pick a Version

1.2.3
>=1.2.3, <2.0.0
Library Publisher Pick a Version
^

1.2.3
>=1.2.3, <2.0.0
Library Publisher Pick a Version
^

0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^

0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^

0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^
Major Version Zero

Library Consumers
Composer for

Library Consumer Install or update?
install or update?

Library Consumer Install or update?
Make sure you have
installed the last
updates from other
developers.
?
install updateor

Library Consumer Install or update?
Make sure you have
installed the last
updates from other
developers.
?
install updateor

Library Consumer Install or update?
Deploying a new
release of your
application to
production.
?
install updateor

Library Consumer Install or update?
Deploying a new
release of your
application to
production.
?
install updateor

Library Consumer Install or update?
Checked out a new
project and want to
start coding.
?
install updateor

Library Consumer Install or update?
Checked out a new
project and want to
start coding.
?
install updateor

Library Consumer Install or update?
Grab new versions for
the dependencies of
your project.
?
install updateor

Library Consumer Install or update?
Grab new versions for
the dependencies of
your project.
?
install updateor

Your application
Public
Repository
Library Consumer Install or update?
composer.lock
composer install
composer update

Your application
Public
Repository
Library Consumer Install or update?
composer.lock
read
composer install
composer update

Your application
Public
Repository
Library Consumer Install or update?
composer.lock
read grab version
composer install
composer update

Your application
Public
Repository
Library Consumer Install or update?
composer.lock
read grab version
check latest compatible release
composer install
composer update

Your application
Public
Repository
Library Consumer Install or update?
composer.lock
read grab version
check latest compatible release
update
composer install
composer update

Library Consumer Install or update?
commit your lock file

Library Consumer Install or update?
$ composer update --lock
Tip

Pick the
correct
version
Library Consumer Version Selection

Library Consumer Version Selection
dev-master

Library Consumer Version Selection

Library Consumer Version Selection

Library Consumer Using forks
found a bug?

Library Consumer Using forks
$ composer install --prefer-source
Tip

Library Consumer Using forks

Library Consumer Using forks
patch it,

Library Consumer Using forks
patch it,
fork it,

Library Consumer Using forks
patch it,
fork it,
push it…

Library Consumer Using forks
patch it,
fork it,
push it…
wait for it.

Library Consumer Using forks
patch it,
fork it,
push it…
wait for it.

Library Consumer Using forks
symfony/symfony

Library Consumer Using forks
symfony/symfony
rdohms/symfony

Library Consumer Using forks
symfony/symfony
rdohms/symfony
"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/symfony"
}
]

Library Consumer Using forks
symfony/symfony
rdohms/symfony
"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/symfony"
}
]

Library Consumer Using forks
Do not put
forked repositories
on packagist

Library Consumer Using forks
"require": {
"symfony/symfony": "dev-my-patch as 2.5.0"
}
Tip

Library Consumer Composer and deployments
Composer
and
production

Library Consumer Composer and deployments
Production
Server
Packagist
Ƙ

Library Consumer Composer and deployments
Production
Server
Packagist
Ƙ
Man in the middle

Library Consumer Composer and deployments
Build Server
Production
Server
Packagist
Ƙ
Man in the middle

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
Install same versions
Uses information defined in the composer.lock file

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
Downloads distribution packages
Can use local cache for previously downloaded
No git required

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
Avoids download unnecessary developer libraries

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader

Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
Generates classmap from PSR-0/4 autoloaders
Speeds up autoloading

Library Consumer Licensing
$ composer licenses
Name: __root__
Version: 1.0.0
Licenses: none
Dependencies:
doctrine/annotations v1.2.1 MIT
doctrine/cache v1.3.1 MIT
doctrine/collections v1.2 MIT
doctrine/common v2.4.2 MIT
doctrine/inflector v1.0 MIT
doctrine/lexer v1.0 MIT
psr/log 1.0.0 MIT
symfony/symfony v2.5.6 MIT
twig/twig v1.16.2 BSD-3-Clause
Tip

Library Consumer Private Packages and Proxy
Satis and Toran

composer PackagistYour application
Public
Repository
Library Consumer Private Packages and Proxy

composer
Packagist
Your application
Public
Repository
Satis / Toran
Private
Repository
proxy
Library Consumer Private Packages and Proxy

Library Consumer Private Packages and Proxy
toranproxy.com
private repos, automatic packagist proxy
and support composer development

Library Consumer Tooling
$ composer require jquery/jquery
How many of you?

Library Consumer Tooling

Library Consumer Tooling

Javascript only Developer
Library Consumer Tooling
my-js-library

Javascript only Developer
Library Consumer Tooling
my-js-library
package.json

Javascript only Developer
Library Consumer Tooling
my-js-library
package.json
bower.json

Javascript only Developer
Library Consumer Tooling
my-js-library
composer.json
package.json
bower.json

Javascript only Developer
Library Consumer Tooling
my-js-library
composer.json
package.json
bower.json
.gemspec

Javascript only Developer
Library Consumer Tooling
my-js-library
composer.json
package.json
bower.json
.gemspec

Library Consumer Tooling

Library Consumer Tooling
Right tool.
Right job.

Library Consumer One last thing
One last thing…

Library Consumer pickle!

Library Consumer pickle!
$ pickle install memcache
https://wiki.php.net/rfc/pickle
https://github.com/FriendsOfPHP/pickle

Thank you.
https://joind.in/13445
https://leanpub.com/
composer-cookbook

Thank you.any questions?
http://slides.doh.ms
http://doh.ms
@rdohms
https://joind.in/13445
https://leanpub.com/
composer-cookbook