Tag archive
In May 2026, 700+ compromised Laravel-Lang package versions shipped a credential stealer through Composer. Here's how to harden your Laravel deploy pipeline: --no-scripts, allow-plugins, lockfile discipline, scoped deploy keys, and a full incident checklist.
Composer scripts and plugins turn a PHP repo into one that checks itself on install. Here's how to wire the boring parts once.
composer audit checks your lock file against the advisory database. Wire it into CI so a known CVE fails the build before it ships.
Как устранить ошибку Class not found в PHP: настройка автозагрузки PSR-4 При переходе от...
Composer install is your slowest CI step. Three flags, one cache, one autoloader trick, and a Laravel 12 deploy drops from 2:24 to 0:38.
A composer.json and App\Domain / App\Application / App\Infrastructure layout that lives next to Laravel's app/ or Symfony's src/ without a fight.
Urgent Update: Composer Vulnerability Leaks GitHub Secrets in Plaintext Logs (CVE-2026-45793) TL;DR: Breaking tech news from Cybersecurity News. Wha...
Read composer.lock Directly: A 1000-Line CLI That Beats composer show --tree You inherit...
The 4 composer.json issues that block most Laravel 13 upgrades: PHP constraints, Symfony 8 surprise, Spatie versions, and testing packages. Find yours fast.
Managing a single enterprise Drupal application is challenging. Managing a "Custom Upstream" that...
Fake Laravel packages on Packagist deploy RATs that expose your .env secrets. Learn to audit your Composer dependencies and lock down every project today.
Use Blade addExtension to make .md files support @include and variables, then pass the output through CommonMark to generate HTML for dynamic documentation.