Proud to announce we just renewed our annual $18,000 sponsorship for the The PHP Foundation! Check out this summary on the work completed in 2025. So much more could be accomplished, if all businesses using PHP contributed. Sign up as a sponsor and help moving PHP forward!

Back from our annual #SymfonyCon trip! Enjoyed celebrating 20 years of #Symfony with its community in Amsterdam. The @packagist booth was busy throughout the event. My package manager security outlook talk sparked good conversations. See you in Warsaw 2026! #php #composerphp

Your crypto has purpose. 💙 The largest collection of crypto-friendly nonprofits, all in one place. Donate easily, securely, and receive an instant tax receipt. Find a cause to support today!

💥 Shoutout to our Gold Sponsor: @PrivatePackagist! 🥇 Thanks for fueling innovation and supporting #SymfonyCon Amsterdam 2025! 🚀💛 👏 You rock! #PHP #Symfony #Sponsor

🔒Just on stage: Nils Adermann (@naderman) with "Package Manager Security in 2025: What's Next?” At #SymfonyCon Amsterdam 2025, Nils took us into Composer & Packagist security, emerging standards, and how to stay safe from supply chain attacks!!! 💻🛡️🔥💜 #Symfony #PHP

In Amsterdam next week and part of a group underrepresented at tech confs, or can't afford a ticket? Private Packagist is sponsoring @symfonycon (Nov 27th/28th) and we have a ticket to give away: Reply your favorite PHP8.5 feature to win #php #phpc #symfony #symfonycon

3" perfectly straight hole into a concrete foundation. Just align the circles and go. Easy. Featuring: +BullseyeBore Core CG1-101 +Milwaukee 1/2" Hammer Drill/Driver +Diablo 1/4" Red Granite Plus Concrete Bit Use code FREESHIP at checkout for free standard US shipping.

PHP 8.5 Released! 🎉 In this new release we have: – URI Extension – Pipe Operator – Clone With – A new #[\NoDiscard] attribute – Closures and first-class callables in constant expressions – Persistent cURL share handles Read all about it: https://t.co/RNfkvZSyHY

Read more at

New in Private Packagist: Usage Tracking page can now help prioritize security updates by showing how dependencies cascade through projects and where vulnerable versions are used. Trusted Publishing for GitHub Actions and better synchronization setup. #php #phpc #composerphp

More detail about what we're working on can be viewed on our blog at

After Composer 2.9 CLI security improvements, we're working on a transparency log for https://t.co/Gf5b9WSQGV to strengthen PHP supply chain security, funded by the @sovtechagency with help of the @ThePHPF and Private Packagist. #php #phpc #composerphp

Composer 2.9 is here! 🚀 It automatically blocks packages with known vulnerabilities, has a new repository command to manage repos from the CLI, and lots more! #composerphp #phpc #PHP

The PHP Foundation is Seeking a New Executive Director! 🐘💜 We're asking the PHP community to help find the right person for this role. If you know someone who would be an excellent fit, please encourage them to apply or reach out to us directly. #phpc #php

Composer 2.9 is coming, and there's an RC to try out! We need your help and feedback https://t.co/wqtAf613rF #composerphp #phpc

Bitbucket Cloud is retiring app passwords in favor of API tokens. If you're using Private Packagist with Bitbucket Cloud, migrate now to avoid future disruptions. Our blog post explains it step-by-step: https://t.co/FUWOrapXfU #php #composerphp #phpc #privatepackagist #bitbucket

Here's our blog post on the statement:

Together with PyPI, Maven Central, https://t.co/HR2zt7SyBI and other major package registries we signed a statement on sustainable open source infrastructure. 3B+ installs/month and evolving #composerphp and https://t.co/WIMPyEqZA2 requires sharing the costs. #phpc #php

🚨 Warning to PHP package maintainers: We did not email you to change your passwords & 2FA. Emails asking you to update your credentials are a phishing attempt. We had the phishing site & domain taken down. If you got the email and entered your credentials, please contact us.

Thank you @packagist for supporting the #APIPlatformCon 2025!

🚨 PSA for #PHP package maintainers: DO NOT REPLACE tags! If you messed up a release simply do another. No matter how quickly you notice a mistake, automatic tools pulled the original tag, triggered auto updates. Users will never know you recreated the tag & use broken tag. #phpc

Had a great time presenting Composer Best Practices for 2025 at #APIPlatformCon in Lille this morning. Meet me at our booth, I'd love to hear all about how you work with #composerphp! #php #phpc #supplychainsecurity #symfony #apiplatform