The document discusses Composer, a dependency management tool for PHP, and outlines how to manage packages using 'composer.json' and 'composer.lock' files. It highlights issues that can arise when installing packages, specifically focusing on the 'monolog/monolog' package that failed to install due to potential name typos or stability issues. The document also provides installation tips, version selection guidance, and suggestions for updating dependencies in a development environment.

1. Composer
the right way
@rdohms
Rafael Dohms

2. photo: smileymanwithahat

5. photo: Rob Allen
jobs.usabilla.com
We are hiring!

6. photo: 18millionpixels

7. Library Publisher
photo: 18millionpixels

8. Library Publisher
Library Consumer
photo: 18millionpixels

9. Library Publisher
Library
Library Consumer
photo: 18millionpixels

10. Library Publisher
Library
Library Consumer
Packagist
photo: 18millionpixels

11. photo: 18millionpixels

12. {
"require": {
"monolog/monolog": “2.0”
}
}
photo: 18millionpixels

13. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
photo: 18millionpixels

14. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
photo: 18millionpixels

15. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
___
~1.1
photo: 18millionpixels

16. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
- Installing psr/log (1.0.0)
Loading from cache
- Installing monolog/monolog (1.11.0)
Downloading: 100%
monolog/monolog suggests installing graylog2/gelf-php (Allow sending log messages to a GrayLog2 server)
[...]
monolog/monolog suggests installing ext-mongo (Allow sending log messages to a MongoDB server)
monolog/monolog suggests installing aws/aws-sdk-php (Allow sending log messages to AWS services like DynamoDB)
monolog/monolog suggests installing rollbar/rollbar (Allow sending log messages to Rollbar)
Writing lock file
Generating autoload files
___
~1.1
photo: 18millionpixels

17. composer

18. composercomposer.json!

19. composercomposer.json!
composer.lock!

20. composercomposer.json!
composer.lock!

21. discovery Packagist
"
composercomposer.json!
composer.lock!

22. discovery sourcePackagist
"
Repository
#
composercomposer.json!
composer.lock!

23. discovery source
installation
Packagist
"
Vendor
Folder
$
Repository
#
composercomposer.json!
composer.lock!

24. $ composer self-update
Production
$ composer self-update --snapshot
Development
$ composer self-update --preview
CI / Build

25. $ composer init
Library Publisher

26. $ composer init
Library Publisher
$ composer require <vendor>/<package>
Library Consumer

27. Install instructions

28. Install instructions
1. Edit your composer.json

29. Install instructions
1. Edit your composer.json
2. Add `package/vendor`

30. Install instructions
1. Edit your composer.json
2. Add `package/vendor`
3. Run `composer update`

31. Install instructions
1. Edit your composer.json
2. Add `package/vendor`
3. Run `composer update`
or was that install? err… i can’t remember.

33. $ composer require monolog/monolog
Tip

34. $ composer require monolog/monolog
Tip
Using version ^1.11 for monolog/monolog

35. $ composer require monolog/monolog --sort-packages
Tip

36. $ composer require monolog/monolog
--prefer-stable
--prefer-lowest
--no-scripts
Tip

37. $ composer remove monolog/monolog
Tip

38. Library Publishers
Composer for

39. Library Publisher Unique vendor names
vendor / package

40. Library Publisher Unique vendor names
pick your own
unique vendor

41. Library Publisher Unique vendor names
or join a collective

42. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?

43. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?
' What problem does it solve?
' Usage examples
' Install instructions
' How can I contribute?

44. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?
' List relevant changes
' Make BC breaks prominent
' Show examples of how to upgrade
' What problem does it solve?
' Usage examples
' Install instructions
' How can I contribute?

45. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?
' List relevant changes
' Make BC breaks prominent
' Show examples of how to upgrade
' Pick one that reflects your values
' choosealicense.com can help
' What problem does it solve?
' Usage examples
' Install instructions
' How can I contribute?

46. Library Publisher Semantic Versioning
1 . 2 3.major minor patch

47. Library Publisher Semantic Versioning
1 . 2 3.major minor patch
Bug Fixes

48. Library Publisher Semantic Versioning
1 . 2 3.major minor patch
New Features Bug Fixes

49. Library Publisher Semantic Versioning
1 . 2 3.major minor patch
API / BC
Breaks
New Features Bug Fixes

50. Library Publisher Tagging
Please, tag your
releases.

51. Library Publisher Tagging
Please, tag your
releases.
often!

52. http://phppackagechecklist.com/
The PHP Package
Checklist
Library Publisher The Checklist

53. Library Publisher “I'm out"
photo: nickwebb

54. Library Publisher “I'm out"

55. Library Publisher “I'm out"
Click here and provide an alternative

56. Library Publisher “I'm out"

57. Pick the
correct
version
Library Publisher Pick a Version

58. *the asterisk
Library Publisher Pick a Version

59. *the asterisk○Library Publisher Pick a Version

60. ~the tilde
Library Publisher Pick a Version

61. ~1.2
>=1.2.0, <2.0.0
Library Publisher Pick a Version

62. ~1.2
>=1.2.0, <2.0.0
Library Publisher Pick a Version
)

63. ~1.2.3
>=1.2.3, <1.3
Library Publisher Pick a Version

64. ~1.2.3
>=1.2.3, <1.3
Library Publisher Pick a Version
)

65. Yo @rdohms, I’m
really happy for you and
I’m gonna let you finish, but
the tilde operator is
totally old news.

66. ^the caret
Library Publisher Pick a Version

67. 1.2.3
>=1.2.3, <2.0.0
Library Publisher Pick a Version
^

68. 1.2.3
>=1.2.3, <2.0.0
Library Publisher Pick a Version
)
^
)

69. 0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^

70. 0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^
)

71. 0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^
)
Major Version Zero

72. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “^2.3”,
"zendframework/zend-servicemanager": “^2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application

73. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “^2.3”,
"zendframework/zend-servicemanager": “^2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application
*

74. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “^2.3”,
"zendframework/zend-servicemanager": “^2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application
*

75. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “^2.3”,
"zendframework/zend-servicemanager": “^2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application
*
^2.1

76. Library Consumers
Composer for

77. Library Consumer Install or update?
install or update?

78. Library Consumer Install or update?
Make sure you have
installed the last
updates from other
developers.
?
install updateor

79. Library Consumer Install or update?
Make sure you have
installed the last
updates from other
developers.
?
install updateor

80. Library Consumer Install or update?
Deploying a new
release of your
application to
production.
?
install updateor

81. Library Consumer Install or update?
Deploying a new
release of your
application to
production.
?
install updateor

82. Library Consumer Install or update?
Checked out a new
project and want to
start coding.
?
install updateor

83. Library Consumer Install or update?
Checked out a new
project and want to
start coding.
?
install updateor

84. Library Consumer Install or update?
Grab new versions for
the dependencies of
your project.
?
install updateor

85. Library Consumer Install or update?
Grab new versions for
the dependencies of
your project.
?
install updateor

86. Your application
$
Public
Repository
#
Library Consumer Behind the scenes with install/update
composer.lock!
composer install
composer update

87. Your application
$
Public
Repository
#
Library Consumer Behind the scenes with install/update
composer.lock!
read
composer install
composer update

88. Your application
$
Public
Repository
#
Library Consumer Behind the scenes with install/update
composer.lock!
read grab version
composer install
composer update

89. Your application
$
Public
Repository
#
Library Consumer Behind the scenes with install/update
composer.lock!
read grab version
check latest compatible release
composer install
composer update

90. Your application
$
Public
Repository
#
Library Consumer Behind the scenes with install/update
composer.lock!
read grab version
check latest compatible release
update
composer install
composer update

91. Your application
$
Public
Repository
#
Library Consumer Behind the scenes with install/update
composer.lock!
read grab version
check latest compatible release
update
composer install
composer update
no lock file? composer update

92. Library Consumer The .lock issue
commit your lock file*

93. Library Consumer The .lock issue
commit your lock file*
* always! even for libraries! :D

94. Library Consumer The .lock issue
commit your lock file*
* always! even for libraries! :D
** we will discuss that over beer.

95. Tip
since beta1
Library Consumer Updating interactively

96. $ composer update —interactive (-i)
Tip
since beta1
Library Consumer Updating interactively

97. CONFLICT (content): Merge conflict in composer.lock
Automatic merge failed; fix conflicts and then commit the result.
Library Consumer Merge Conflict

98. CONFLICT (content): Merge conflict in composer.lock
Automatic merge failed; fix conflicts and then commit the result.
Library Consumer Merge Conflict

101. # First.
# Get the valid, clean external version of the lock
$ git checkout origin/<target> -- composer.lock composer.json
# Second.
# Replay your changes, whatever they were
$ composer require <new/package> --update-with-dependencies
$ composer update <existing/package>
# Third.
# Commit your changes
$ git add .
$ git commit.
# Profit!
Solving Merge Conflicts
Library Consumer Solving Merge Conflicts

102. Pick the
correct
version
Library Consumer Version Selection

103. Library Consumer Version Selection
dev-master

104. Library Consumer Version Selection

105. Library Consumer Version Selection

106. Tip
since beta1

107. $ composer why-not <package>
doctrine/doctrine-bundle 1.6.2 requires symfony/framework-bundle (~2.3|~3.0)
doctrine/doctrine-cache-bundle 1.3.0 requires symfony/doctrine-bridge (~2.2|~3.0)
doctrine/doctrine-fixtures-bundle 2.3.0 requires symfony/doctrine-bridge (~2.3|~3.0)
doctrine/doctrine-migrations-bundle dev-master requires symfony/framework-bundle (~2.3|~3.0)
doctrine/migrations dev-master requires symfony/yaml (~2.3|~3.0)
doctrine/orm v2.5.4 requires symfony/console (~2.5|~3.0)
friendsofsymfony/rest-bundle 1.7.7 requires symfony/http-kernel (^2.3.24|~3.0)
incenteev/composer-parameter-handler v2.1.2 requires symfony/yaml (~2.3|~3.0)
jms/serializer-bundle 1.1.0 requires symfony/framework-bundle (~2.3|~3.0)
knplabs/knp-paginator-bundle 2.5.1 requires symfony/framework-bundle (~2.3|~3.0)
kriswallsmith/assetic v1.3.2 requires symfony/process (~2.1|~3.0)
Tip
since beta1

108. $ composer outdated
composer/composer 1.0.3 1.1.0
filp/whoops 2.1.0 2.1.2
justinrainbow/json-schema 1.6.1 2.0.3
nikic/fast-route v0.7.0 v1.0.0
oscarotero/psr7-middlewares v3.14.3 v3.15.1
Tip

109. Library Consumer Using forks
found a bug?

110. Library Consumer Using forks
$ composer install --prefer-source
Tip

111. Library Consumer Using forks

112. Library Consumer Using forks
patch it,

113. Library Consumer Using forks
patch it,
fork it,

114. Library Consumer Using forks
patch it,
fork it,
push it…

115. Library Consumer Using forks
patch it,
fork it,
push it…
wait for it.

116. Library Consumer Using forks
patch it,
fork it,
push it…
wait for it.

117. Library Consumer Using forks
symfony/symfony

118. Library Consumer Using forks
symfony/symfony
rdohms/symfony

119. Library Consumer Using forks
symfony/symfony
rdohms/symfony
"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/symfony"
}
]

120. Library Consumer Using forks
symfony/symfony
rdohms/symfony
"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/symfony"
}
]
+

121. Library Consumer Using forks
Do not put
forked repositories
on packagist
,

122. Library Consumer Using forks
"require": {
"symfony/symfony": "dev-my-patch as 2.5.0"
}
Tip

123. Library Consumer Composer and deployments
Composer
and
production

124. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev --optimize-autoloader
,

125. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev --optimize-autoloader
,

126. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev --optimize-autoloader
,
- Install same versions
- Uses information defined in the composer.lock file

127. $ composer install --prefer-dist --no-dev --optimize-autoloader
Library Consumer Composer and deployments
,

128. $ composer install --prefer-dist --no-dev --optimize-autoloader
Library Consumer Composer and deployments
,
- Downloads distribution packages
- Can use local cache for previously downloaded
- No git required

129. $ composer install --prefer-dist --no-dev --optimize-autoloader
Library Consumer Composer and deployments
,

130. $ composer install --prefer-dist --no-dev --optimize-autoloader
Library Consumer Composer and deployments
,
- Avoids download unnecessary developer libraries

131. $ composer install --prefer-dist --no-dev --optimize-autoloader
Library Consumer Composer and deployments
,

132. $ composer install --prefer-dist --no-dev --optimize-autoloader
Library Consumer Composer and deployments
,
- Generates classmap from PSR-0/4 autoloaders
- Speeds up autoloading

133. Library Consumer Licensing
$ composer licenses
Name: __root__
Version: 1.0.0
Licenses: none
Dependencies:
doctrine/annotations v1.2.1 MIT
doctrine/cache v1.3.1 MIT
doctrine/collections v1.2 MIT
doctrine/common v2.4.2 MIT
doctrine/inflector v1.0 MIT
doctrine/lexer v1.0 MIT
psr/log 1.0.0 MIT
symfony/symfony v2.5.6 MIT
twig/twig v1.16.2 BSD-3-Clause
Tip

134. Library Consumer Simulating Environments
Tip
Production
Server
.
Development
Server
.

135. Library Consumer Simulating Environments
Tip
Production
Server
.
Development
Server
.PHP
7.0
PHP
5.6

136. Library Consumer Simulating Environments
"config": {
"platform": {
"php": “5.6.2”,
“ext-mongodb”: “1.1”
}
},
Tip
Production
Server
.
Development
Server
.PHP
7.0
PHP
5.6

137. Library Consumer Simulating Environments
$ composer install —-ignore-platform-reqs
Tip

138. Library Consumer Private Packages and Proxy
Satis and Toran

139. composer Packagist
"
Your application
$
Public
Repository
#
Library Consumer Private Packages and Proxy

140. composer
Packagist
"
Your application
$
Public
Repository
#
Satis / Toran
"
Private
Repository
/
proxy
Library Consumer Private Packages and Proxy

141. Library Consumer Private Packages and Proxy
toranproxy.com
private repos, automatic packagist proxy
and support composer development

142. Library Consumer Tooling
$ composer require jquery/jquery
How many of you?

143. Library Consumer Tooling

144. Library Consumer Tooling

145. Javascript only Developer
Library Consumer Tooling
0 my-js-library
1

146. Javascript only Developer
Library Consumer Tooling
0 my-js-library
! package.json
1

147. Javascript only Developer
Library Consumer Tooling
0 my-js-library
! package.json
! bower.json
1

148. Javascript only Developer
Library Consumer Tooling
0 my-js-library
! composer.json
! package.json
! bower.json
1

149. Javascript only Developer
Library Consumer Tooling
0 my-js-library
! composer.json
! package.json
! bower.json
! .gemspec
1

150. Javascript only Developer
Library Consumer Tooling
0 my-js-library
! composer.json
! package.json
! bower.json
! .gemspec
1
2
2

151. Library Consumer Tooling

152. Library Consumer Tooling

153. Library Consumer Tooling
Right tool.
Right job.

154. Library Consumer One last thing
One last thing…

155. Library Consumer pickle!

156. Library Consumer pickle!
$ pickle install memcache
https://wiki.php.net/rfc/pickle
https://github.com/FriendsOfPHP/pickle

157. Thank you.
jobs.usabilla.com
We are hiring!

158. Thank you.any questions?
3 http://slides.doh.ms
4 http://doh.ms
5 @rdohms
jobs.usabilla.com
We are hiring!