Composer has triggered a renaissance in the PHP community, it has changed the way we deal with other people’s code and it has changed the way we share our code. We are all slowly moving to using Composer, from Wordpress to Joomla and Drupal and frameworks in between. But many of us mistreat composer, follow outdated practices or simply lack a few tricks. In this session i’ll get you the low down on how to use composer the right way.

1. Composerthe right way
@rdohms
Rafael Dohms

2. photo: smileymanwithahat

5. photo: Rob Allen

6. photo: 18millionpixels

7. Library Publisher
photo: 18millionpixels

8. Library Publisher
Library Consumer
photo: 18millionpixels

9. Library Publisher
Library
Library Consumer
photo: 18millionpixels

10. Library Publisher
Library
Library Consumer
Packagist
photo: 18millionpixels

11. photo: 18millionpixels

12. {
"require": {
"monolog/monolog": “2.0”
}
}
photo: 18millionpixels

13. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
photo: 18millionpixels

14. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
photo: 18millionpixels

15. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
___
~1.1
photo: 18millionpixels

16. {
"require": {
"monolog/monolog": “2.0”
}
}
{
"name": “monolog/monolog”
...
}
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.
Problem 1
- The requested package monolog/monolog could not be found in any version, there may be a typo in the package name.
Potential causes:
- A typo in the package name
- The package is not available in a stable-enough version according to your minimum-stability setting
see <https://groups.google.com/d/topic/composer-dev/_g3ASeIFlrc/discussion> for more details.
Read <http://getcomposer.org/doc/articles/troubleshooting.md> for further common problems.
Installation failed, reverting ./composer.json to its original content.
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
- Installing psr/log (1.0.0)
Loading from cache
- Installing monolog/monolog (1.11.0)
Downloading: 100%
monolog/monolog suggests installing graylog2/gelf-php (Allow sending log messages to a GrayLog2 server)
[...]
monolog/monolog suggests installing ext-mongo (Allow sending log messages to a MongoDB server)
monolog/monolog suggests installing aws/aws-sdk-php (Allow sending log messages to AWS services like DynamoDB)
monolog/monolog suggests installing rollbar/rollbar (Allow sending log messages to Rollbar)
Writing lock file
Generating autoload files
___
~1.1
photo: 18millionpixels

17. composer

18. composercomposer.json!

19. composercomposer.json!
composer.lock!

20. composercomposer.json!
composer.lock!

21. discovery Packagist
"
composercomposer.json!
composer.lock!

22. discovery sourcePackagist
"
Repository
#
composercomposer.json!
composer.lock!

23. discovery source
installation
Packagist
"
Vendor
Folder
$
Repository
#
composercomposer.json!
composer.lock!

24. $ composer init
Library Publisher

25. $ composer init
Library Publisher
$ composer require <vendor>/<package>
Library Consumer

26. $ composer require monolog/monolog
Tip

27. $ composer require monolog/monolog
Tip
Using version ~1.11 for monolog/monolog

28. Release the @DOHMSRAKEN!!
photo by @rosstuck

29. $ composer require monolog/monolog --sort-packages
Tip

30. Library Publishers
Composer for

31. Library Publisher Unique vendor names
vendor / package

32. Library Publisher Unique vendor names
pick your own
unique vendor

33. Library Publisher Unique vendor names
or join a collective

34. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?

35. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?
' What problem does it solve?
' Usage examples
' Install instructions
' How can I contribute?

36. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?
' List relevant changes
' Make BC breaks prominent
' Show examples of how to upgrade
' What problem does it solve?
' Usage examples
' Install instructions
' How can I contribute?

37. README!
CHANGELOG%
LICENSE&
Library Publisher What’s in your library?
' List relevant changes
' Make BC breaks prominent
' Show examples of how to upgrade
' Pick one that reflects your values
' choosealicense.com can help
' What problem does it solve?
' Usage examples
' Install instructions
' How can I contribute?

38. Library Publisher Semantic Versioning
1 . 2 3.major minor patch

39. Library Publisher Semantic Versioning
1 . 2 3.major minor patch
Bug Fixes

40. Library Publisher Semantic Versioning
1 . 2 3.major minor patch
New Features Bug Fixes

41. Library Publisher Semantic Versioning
1 . 2 3.major minor patch
API / BC
Breaks
New Features Bug Fixes

42. Library Publisher Tagging
Tag it and Bag it

43. Library Publisher Tagging
# Simple Tag
$ git tag v1.2.3
# Annotated Tag
$ git tag -a v1.2.3 -m “Description of Release"

44. Library Publisher “I'm out"
photo: jilliancorinne

45. Library Publisher “I'm out"

46. Library Publisher “I'm out"
Click here and provide another

47. Library Publisher “I'm out"

48. Library Publisher “I'm out"

49. Pick the
correct
version
Library Publisher Pick a Version

50. *the asterisk
Library Publisher Pick a Version

51. *the asterisk○Library Publisher Pick a Version

52. ~the tilde
Library Publisher Pick a Version

53. ~1.2
>=1.2.0, <2.0.0
Library Publisher Pick a Version

54. ~1.2
>=1.2.0, <2.0.0
Library Publisher Pick a Version
)

55. ~1.2.3
>=1.2.3, <1.3
Library Publisher Pick a Version

56. ~1.2.3
>=1.2.3, <1.3
Library Publisher Pick a Version
)

57. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application

58. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application
*

59. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application
*

60. "require": {
"zendframework/zend-stdlib": “2.1.*”,
"zendframework/zend-servicemanager": "2.1.*",
},
“require-dev": {
“phpunit/phpunit": “~3.7”
}
Library Publisher Pick a Version
"require": {
"zendframework/zend-stdlib": “~2.3”,
"zendframework/zend-servicemanager": “~2.3",
},
“require-dev": {
“phpunit/phpunit": “~4”
}
3rd party library
Your application
*
~2.1

61. Yo @rdohms, I’m
really happy for you and
I’m gonna let you finish, but
the tilde operator is
totally old news.

62. ^the caret
Library Publisher Pick a Version

63. 1.2.3
>=1.2.3, <2.0.0
Library Publisher Pick a Version
^

64. 1.2.3
>=1.2.3, <2.0.0
Library Publisher Pick a Version
)
^
)

65. 0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^

66. 0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^
)

67. 0.3.0
>=0.3.0, <0.4.0
Library Publisher Pick a Version
^
)
Major Version Zero

68. Library Consumers
Composer for

69. Library Consumer Install or update?
install or update?

70. Library Consumer Install or update?
Make sure you have
installed the last
updates from other
developers.
?
install updateor

71. Library Consumer Install or update?
Make sure you have
installed the last
updates from other
developers.
?
install updateor

72. Library Consumer Install or update?
Deploying a new
release of your
application to
production.
?
install updateor

73. Library Consumer Install or update?
Deploying a new
release of your
application to
production.
?
install updateor

74. Library Consumer Install or update?
Checked out a new
project and want to
start coding.
?
install updateor

75. Library Consumer Install or update?
Checked out a new
project and want to
start coding.
?
install updateor

76. Library Consumer Install or update?
Grab new versions for
the dependencies of
your project.
?
install updateor

77. Library Consumer Install or update?
Grab new versions for
the dependencies of
your project.
?
install updateor

78. Your application
$
Public
Repository
#
Library Consumer Install or update?
composer.lock!
composer install
composer update

79. Your application
$
Public
Repository
#
Library Consumer Install or update?
composer.lock!
read
composer install
composer update

80. Your application
$
Public
Repository
#
Library Consumer Install or update?
composer.lock!
read grab version
composer install
composer update

81. Your application
$
Public
Repository
#
Library Consumer Install or update?
composer.lock!
read grab version
check latest compatible release
composer install
composer update

82. Your application
$
Public
Repository
#
Library Consumer Install or update?
composer.lock!
read grab version
check latest compatible release
update
composer install
composer update

83. Library Consumer Install or update?
commit your lock file

84. Library Consumer Install or update?
$ composer update --lock
Tip

85. Pick the
correct
version
Library Consumer Version Selection

86. Library Consumer Version Selection
dev-master

87. Library Consumer Version Selection

88. Library Consumer Version Selection

89. Library Consumer Using forks
found a bug?

90. Library Consumer Using forks
$ composer install --prefer-source
Tip

91. Library Consumer Using forks

92. Library Consumer Using forks
patch it,

93. Library Consumer Using forks
patch it,
fork it,

94. Library Consumer Using forks
patch it,
fork it,
push it…

95. Library Consumer Using forks
patch it,
fork it,
push it…
wait for it.

96. Library Consumer Using forks
patch it,
fork it,
push it…
wait for it.

97. Library Consumer Using forks
symfony/symfony

98. Library Consumer Using forks
symfony/symfony
rdohms/symfony

99. Library Consumer Using forks
symfony/symfony
rdohms/symfony
"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/symfony"
}
]

100. Library Consumer Using forks
symfony/symfony
rdohms/symfony
"repositories": [
{
"type": "vcs",
"url": "https://github.com/rdohms/symfony"
}
]
+

101. Library Consumer Using forks
Do not put
forked repositories
on packagist
,

102. Library Consumer Using forks
"require": {
"symfony/symfony": "dev-my-patch as 2.5.0"
}
Tip

103. Library Consumer Composer and deployments
Composer
and
production

104. Library Consumer Composer and deployments
Production
Server
-
Packagist
.

105. Library Consumer Composer and deployments
Production
Server
-
Packagist
.
/ Man in the middle

106. Library Consumer Composer and deployments
Build Server
0
Production
Server
-
"
Packagist
.
/ Man in the middle

107. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev -optimize-autoloader
,

108. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev -optimize-autoloader
,

109. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev -optimize-autoloader
,
1 Install same versions
1 Uses information defined in the composer.lock file

110. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
,

111. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
,
1 Downloads distribution packages
1 Can use local cache for previously downloaded
1 No git required

112. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
,

113. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
,
1 Avoids download unnecessary developer libraries

114. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
,

115. Library Consumer Composer and deployments
$ composer install --prefer-dist --no-dev —optimize-autoloader
,
1 Generates classmap from PSR-0/4 autoloaders
1 Speeds up autoloading

116. Library Consumer Licensing
$ composer licenses
Name: __root__
Version: 1.0.0
Licenses: none
Dependencies:
doctrine/annotations v1.2.1 MIT
doctrine/cache v1.3.1 MIT
doctrine/collections v1.2 MIT
doctrine/common v2.4.2 MIT
doctrine/inflector v1.0 MIT
doctrine/lexer v1.0 MIT
psr/log 1.0.0 MIT
symfony/symfony v2.5.6 MIT
twig/twig v1.16.2 BSD-3-Clause
Tip

117. Library Consumer Private Packages and Proxy
Satis and Toran

118. composer Packagist
"
Your application
$
Public
Repository
#
Library Consumer Private Packages and Proxy

119. composer
Packagist
"
Your application
$
Public
Repository
#
Satis / Toran
"
Private
Repository
2
proxy
Library Consumer Private Packages and Proxy

120. Library Consumer Private Packages and Proxy
toranproxy.com
private repos, automatic packagist proxy
and support composer development

121. Library Consumer Tooling
$ composer require jquery/jquery
How many of you?

122. Library Consumer Tooling

123. Library Consumer Tooling

124. Javascript only Developer
Library Consumer Tooling
3 my-js-library
4

125. Javascript only Developer
Library Consumer Tooling
3 my-js-library
! package.json
4

126. Javascript only Developer
Library Consumer Tooling
3 my-js-library
! package.json
! bower.json
4

127. Javascript only Developer
Library Consumer Tooling
3 my-js-library
! composer.json
! package.json
! bower.json
4

128. Javascript only Developer
Library Consumer Tooling
3 my-js-library
! composer.json
! package.json
! bower.json
! .gemspec
4

129. Javascript only Developer
Library Consumer Tooling
3 my-js-library
! composer.json
! package.json
! bower.json
! .gemspec
4
/
/

130. Library Consumer Tooling

131. Library Consumer Tooling
Right tool.
Right job.

132. Library Consumer One last thing
One last thing…

133. Library Consumer pickle!

134. Library Consumer pickle!
$ pickle install memcache
https://wiki.php.net/rfc/pickle
https://github.com/FriendsOfPHP/pickle

135. Thank you.
https://leanpub.com/
composer-cookbook

136. Thank you.any questions?
5 http://slides.doh.ms
6 http://doh.ms
7 @rdohms
https://leanpub.com/
composer-cookbook