Composer, putting dependencies on the score

Rafael Dohms / @rdohms

C!"p#$r
Putting your dependencies on the score

Rafael Dohms

photo credit: Eli White
@rdohms

Evangelist, Speaker and
Contributor.

Developer at WEBclusive.

Enabler at AmsterdamPHP.

%$ E&$v'(!r P)(*+
a general introduction to Composer

Ev$r,-', *!"p#)./
the basic stuff you need to know

Up/r'-)./ (! ' M'$0(r!
advanced features for more complex scenarios

1.-)./ ,!2r (2.$
discovering and sharing libraries

per project system wide
central repository spread out channels
open acceptance strict standards

Pr!b&$":
I need my team and my deployments to use consistent
versions of the dependencies of my project

Pr!b&$":

S!&2()!.:

Pr!b&$":

S!&2()!.:
PEAR

Pr!b&$":

S!&2()!.:
PEAR
SVN Externals

Pr!b&$":

S!&2()!.:
PEAR
SVN Externals
Git Submodules

Pr!b&$":

S!&2()!.:
PEAR
SVN Externals
Git Submodules
vendor management script

Pr!b&$":

S!&2()!.:
PEAR
SVN Externals
Git Submodules
vendor management script

C!"p#$r!

A per-project dependency
manager that allows you to
declare a consistent list of
dependencies and versions for
your application, as well as a
consistent way of sharing your
libraries and making them
discoverable using
packagist.org

I.0('&&)./ C!"p#$r

Local (embed)
$ curl -s http://getcomposer.org/installer | php

Global
$ curl -s http://getcomposer.org/installer | php -- --install-dir=bin

I.0('&&)./ C!"p#$r

Local (embed)
$ curl -s http://getcomposer.org/installer | php

Global
$ curl -s http://getcomposer.org/installer | php -- --install-dir=bin

3p: $ ln -s /usr/bin/composer.phar /usr/bin/composer

I.0('&&)./ C!"p#$r

$ composer.phar --version
Composer version 6573fd3

I.0('&&)./ C!"p#$r

php

$ composer.phar --version
Composer version 6573fd3

K$$p )( 2p-'($-!

$ composer.phar self-update

Updating to version 65e95ed.
Downloading: 100%

C!"p#$r 101

$ cd ~/dev/myproject

C!"p#$r 101

$ vim composer.json

{
"require": {
"silex/silex": "1.0.*"
},

"minimum-stability": "dev"
}

C!"p#$r 101

$ vim composer.json note: project root

{
"require": {
"silex/silex": "1.0.*"
},

}

C!"p#$r 101


“require”: required packages and
{ versions
"require": {
"silex/silex": "1.0.*" adv. ex.: >=1.0.0,<1.2-dev
},

}

C!"p#$r 101


{ versions
"require": {
},

"minimum-stability": "dev" “minimum-stability”: if you only
} want stable packages

default: stable

C!"p#$r 101


{ versions
"require": {
},

"minimum-stability": "dev" “minimum-stability”: if you only
} want stable packages

default: stable

$ composer.phar install

Installing dependencies
- Installing pimple/pimple (dev-master)
Cloning d2cfa2f02f50abef65c238747c753a5f6786f6be

- Installing symfony/routing (dev-master)
Cloning 6bca82c3ea0d42d750de4f49b22020dfd047dc0f

[...]

- Installing silex/silex (dev-master)
Cloning 18e248a277adb061602d2bcabe96011db1c76ec0

symfony/routing suggests installing symfony/config (dev-master)
symfony/routing suggests installing symfony/yaml (dev-master)
symfony/routing suggests installing doctrine/common (>=2.2,<2.3)
[...]
silex/silex suggests installing symfony/browser-kit (2.1.*)
silex/silex suggests installing symfony/css-selector (2.1.*)
silex/silex suggests installing symfony/dom-crawler (2.1.*)
Writing lock file
Generating autoload files

- Installing pimple/pimple (dev-master) your
Cloning d2cfa2f02f50abef65c238747c753a5f6786f6be dependency’s
dependencies

[...]

- Installing silex/silex (dev-master)

[...]
Writing lock file

dependencies

[...]

- Installing silex/silex (dev-master) your dependency

[...]
Writing lock file

dependencies

[...]

- Installing silex/silex (dev-master) your dependency

[...]
Writing lock file
suggestions of other packages,
for further features

P)*42p (+$ ($"p!!
Let Composer bootstrap you development

B!!(0(r'pp)./ Pr!5$*(0

$ composer.phar create-project fabpot/silex-skeleton ~/dev/myproject

B!!(0(r'pp)./ Pr!5$*(0


Installing fabpot/silex-skeleton (dev-master
cc19d406cf3cac253715db92d400992d4f3e1b52)
- Installing fabpot/silex-skeleton (dev-master)
Cloning master

Created project in one-liner/
- Installing pimple/pimple (dev-master)
Cloning d2cfa2f02f50abef65c238747c753a5f6786f6be

[...]

[...]

Writing lock file

B!!(0(r'pp)./ Pr!5$*(0


Installing fabpot/silex-skeleton (dev-master
cc19d406cf3cac253715db92d400992d4f3e1b52)
- Installing fabpot/silex-skeleton (dev-master)
Cloning master

Created project in one-liner/
myproje
Installing dependencies ct/
- Installing pimple/pimple (dev-master) compose
r.json
Cloning d2cfa2f02f50abef65c238747c753a5f6786f6be compose
r.lock
config/
[...] console
/
src/
templat
symfony/routing suggests installing symfony/yaml (dev-master) es/
vendor/
[...]
web/
Writing lock file

I w'.( (! *!.(r)b2($ ' pr!5$*(
Composer can set that up for you.

B!!(0(r'pp)./ C!.(r)b2()!.0

$ composer.phar create-project dms/dms --dev ~/dev/oss/dms

B!!(0(r'pp)./ C!.(r)b2()!.0
gimme dev packages


B!!(0(r'pp)./ C!.(r)b2()!.0
gimme dev packages


    "require-dev": {
        "symfony/symfony": ">=2.1-dev",
        "doctrine/orm": "dev-master"
    },

B!!(0(r'pp)./ C!.(r)b2()!.0
gimme dev packages


    "require-dev": {
        "symfony/symfony": ">=2.1-dev",
        "doctrine/orm": "dev-master"
    },
“require-dev”: only needed if you are going
to contribute

H!w -! I 6.-/&!'- (+$ 6&$0?
PSR-0 and the modern autoloader

Composer generates an
autoload file for all your
dependencies

Composer generates an
autoload file for all your
dependencies

vendor/autoload.php

"autoload": {
"psr-0": { "MyNamespace": "<root>" },

"classmap": ["src/", "lib/", "Something.php"],

"files": ["src/MyLibrary/functions.php"]

},

“autoload”: describes the autoloading needed for
your library
"autoload": {
"psr-0": { "MyNamespace": "<root>" },



},

your library
"autoload": {
"psr-0": { "MyNamespace": "<root>" “psr-0”: PSR-0 Compatible libraries
},



},

your library
"autoload": {
},

"classmap": ["src/", "lib/", "Something.php"], PEAR packages and
“classmap”: Old
other libraries


},

your library
"autoload": {
},

"classmap": ["src/", "lib/", "Something.php"], PEAR packages and
“classmap”: Old
other libraries

“files”: for php functions or
initializations
},

I.0('&&)./, 2p-'()./ '.- "!v)./ !.
how does Composer guarantee consistency

“composer.json”: metadata and
list of your dependencies.

composer.json


composer.json

composer.lock


composer.json

composer.lock

“composer.lock”: existing
dependencies and current
commit hashes.

composer.json

composer.lock

update

composer.json

composer.lock

update install

composer.json

composer.lock

update install

reads
composer.json

composer.lock

update install

reads
composer.json

composer.lock

gets latest

update install

reads
composer.json

writes
composer.lock

gets latest

update install

reads reads

composer.json

writes
composer.lock

gets latest

update install

reads reads

composer.json

compares
writes
composer.lock

gets latest

update install

reads reads

composer.json

compares
writes
composer.lock

gets latest gets locked version

D$v$&!p)./ '. App ). ' ($'"?

Commit you composer.lock file
into the repository, and use
composer install.

D$v$&!p)./ '. App ). ' ($'"?

Commit you composer.lock file
into the repository, and use
composer install.

will ensure everyone is
on the same “page”

I’" -$v$&!p)./ ' &)br'r,, +$&p!
here are some fields you should care about

{
"name": "vendor-namespace/package-name",
"type": "symfony-bundle",
"description": "A sample package for examples",
"keywords": ["php", "package"],
"homepage": "http://doh.ms",
"license": "MIT",
"support": {
"email": "support@mylib.com",
"issues": "http://issues.lib.com"
}

"target-dir": "/folder/to/install",
}

“name”: this should be unique, pick a good one!
{
"license": "MIT",
"support": {
}

}

{
“type”: will be used for more
advanced “custom”installs
"license": "MIT",
"support": {
}

}

{
"license": "MIT", “license”: very important!
"support": {
}

}

{
"support": {
“support”: point people the right
"issues": "http://issues.lib.com" way.
}

}

{
"support": {
“support”: point people the right
"issues": "http://issues.lib.com" way.
}

}
“target-dir”: great for installing sub-dir splits
repositories

ex: Symfony Bundles: /Acme/Bundle/MyBundle

M, *!-$ )0 PHP 5.4 !.&,!
managing system dependencies

{
"require": {
"php": ">=5.3.3",
"ext-ldap": "*"
}
}

{ “php”: PHP version.
"require": {
"php": ">=5.3.3",
"ext-ldap": "*"
}
}

{ “php”: PHP version.
"require": {
"php": ">=5.3.3",
"ext-ldap": "*"
}
“ext-*”: Presence of selected
} extension

B2( I .$$- ' 0p$*)6* v$r0)!.
version modifiers to the rescue!

"acme/foo": "1.0.x-dev#3ebbe75"

“#<ref>”: Get this specific
commit


commit


"acme/foo": "@dev"
"acme/foo": "1.0.*@beta"

commit


"acme/foo": "@dev"
"acme/foo": "1.0.*@beta"

“@<state>”: Get a version
outside your default stability

I .$$- (! 7$*2($ ' f$w 0*r)p(0
how to automate tasks with Composer

"scripts": {
        "post-install-cmd": [
            "SensioBundleDistributionBundleComposerScriptHandler::buildBootstrap",
            "SensioBundleDistributionBundleComposerScriptHandler::clearCache",
            "SensioBundleDistributionBundleComposerScriptHandler::installAssets",
            "SensioBundleDistributionBundleComposerScriptHandler::installRequirementsFile"
        ],
        "post-update-cmd": [
        ]
    },

“scripts”: allows you to run scripts at given moments

    "scripts": {
        "post-install-cmd": [
        ],
        "post-update-cmd": [
        ]
    },

C20(!" R$p#)(!r)$0 !r .!
C!"p#$r, w+'( .!w?
Injecting Composer into wild packages

“hero/superpackage”: “dev-master”


"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/hero-superpackage"
}
]


“repositories”: point to non-indexed, override existing or on-
the-fly packages

"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/hero-superpackage"
}
]

N!.-C!"p#$r P'*4'/$
{
"repositories": [
{
"type": "package",
"package": {
"name": "smarty/smarty",
"version": "3.1.7",
"dist": {
"url": "http://www.smarty.net/files/Smarty-3.1.7.zip",
"type": "zip"
},
"source": {
"url": "http://smarty-php.googlecode.com/svn/",
"type": "svn",
"reference": "tags/Smarty_3_1_7/distribution/"
}
}
}
]
}

N!.-C!"p#$r P'*4'/$
{
"repositories": [
“package”: on-the-fly package, injecting a
{ composer.json
"type": "package",
"package": {
"version": "3.1.7",
"dist": {
"type": "zip"
},
"source": {
"type": "svn",
}
}
}
]
}

N!.-C!"p#$r P'*4'/$
{
"repositories": [
“package”: on-the-fly package, injecting a
{ composer.json
"type": "package",
"package": {
"version": "3.1.7",
"dist": {
"type": "zip" SVN / Git
},
"source": {
"type": "svn",
}
}
}
]
}

I .$$- (+)0 PEAR p'*4'/$...
No Problem!

{
"repositories": [
{
"type": "pear",
"url": "http://pear2.php.net"
}
],
"require": {
"pear-pear2.php.net/PEAR2_Text_Markdown": "*",
"pear-pear2/PEAR2_HTTP_Request": "*"
}
}

{
“pear”: official PEAR and custom PEAR
"repositories": [
channels
{
"type": "pear",
}
],
"require": {
}
}

{
"repositories": [
channels
{
"type": "pear",
}
],
"require": {
}
} Remember the prefix!

{
"repositories": [
channels
{
"type": "pear",
}
],
"require": {
}
} Remember the prefix!

!! Warning: PEAR causes a overhead of requests

alias

{
"extra": {
"branch-alias": {
"dev-master": "1.0.x-dev"
}
},

"require": {
"monolog/monolog": "dev-bugfix as 1.0.x-dev"
}
}

replace provide

alias

{
"extra": {
"branch-alias": {
}
},

"require": {
}
}

replace provide

“replace”: allows you to
replace other packages, and
be used them in their place.

alias

{
"extra": {
"branch-alias": {
}
},

"require": {
}
}

replace provide

“replace”: allows you to “provide”: allows you to say
replace other packages, and a package provides a
be used them in their place. expectation.

I .$$- ' &)br'r, (+'( -!$0..
Let me get that for you

usage info

package info

versions

$ composer.phar search filter

dms/dms-filter-bundle : DMS Filter Bundle, makes Annotation based ...
lexik/form-filter-bundle : This bundle aim to provide classes to
build...
rollerworks/recordfilter-bundle : Record search-filtering bundle for Symfony
brikou/zend_filter : Zend Framework Filter Library
ext-filter : The filter PHP extension
dms/dms-filter : DMS Library, includes various bundles and ...
shtumi/useful-bundle : Symfony ShtumiUsefulBundle

$ composer.phar show dms/dms-filter-bundle

$ composer.phar show dms/dms-filter-bundle

name : dms/dms-filter-bundle
descrip. : DMS Filter Bundle, makes Annotation based entity filtering
available in Symfony
keywords : symfony, bundle, filter, dms
versions : dev-master, v1.1.1, v1.1, 1.0.2, 1.0.1, 1.0.0
type : symfony-bundle
license : MIT
source : [git] https://github.com/rdohms/DMSFilterBundle v1.1.1
dist : [zip] https://github.com/rdohms/DMSFilterBundle/zipball/
v1.1.1 v1.1.1
names : dms/dms-filter-bundle

autoload
psr-0
DMSBundleFilterBundle => .

requires
php >=5.3.2
dms/dms-filter >=1.0.2

B2( ", r$p#)(!r, )0 pr)v'($!
Get your own package repository

R!&&!2( ,!2r !w. S'()0
$ composer.phar create-project composer/satis

R!&&!2( ,!2r !w. S'()0
$ vi packages.json

{
"name": "My Repository",
"homepage": "http://packages.example.org",
"repositories": [
{ "type": "vcs", "url": "http://github.com/mycompany/privaterepo" },
{ "type": "vcs", "url": "http://svn.example.org/private/repo" },
{ "type": "vcs", "url": "http://github.com/mycompany/privaterepo2" }
],
"require-all": true
}

R!&&!2( ,!2r !w. S'()0
$ vi packages.json

{
"name": "My Repository",
"homepage": "http://packages.example.org",
"repositories": [
{ "type": "vcs", "url": "http://github.com/mycompany/privaterepo" },
{ "type": "vcs", "url": "http://svn.example.org/private/repo" },
{ "type": "vcs", "url": "http://github.com/mycompany/privaterepo2" }
],
"require-all": true
}

$ php bin/satis build config.json web/

U0)./ ,!2r !w. S'()0
{
"repositories": [
{
"type": "composer",
"url": "http://packages.yourdomain.net"
}
],

“require”: {
“myvendor/mypackage”: “dev-master”
}
}

U0)./ ,!2r !w. S'()0
{
"repositories": [ “composer”: use this just like it was Packagist
{
"type": "composer",
"url": "http://packages.yourdomain.net"
}
],

“require”: {
“myvendor/mypackage”: “dev-master”
}
}

W+$r$ 0+!2&- I /$( +$&p?

http://getcomposer.org

#composer on irc.freenode.org

%$ E&$v'(!r P)(*+
Dependency Manager, consistent versions, per-project

Ev$r,-', *!"p#)./
install, update, lock and autoload

Up/r'-)./ (! ' M'$0(r!
post-install, overriding, PEAR integration, developer environment

1.-)./ ,!2r (2.$
Satis and Packagist

%'.4 ,!2!
https://joind.in/7051

@rdohms

http://doh.ms

http://slides.doh.ms

Composer, putting dependencies on the score

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (6)

Similar to Composer, putting dependencies on the score

Similar to Composer, putting dependencies on the score (20)

More from Rafael Dohms

More from Rafael Dohms (20)

Recently uploaded

Recently uploaded (20)

Composer, putting dependencies on the score