Extracting a package while still changing it daily, without the tag-and-update cycle that makes that unbearable. The symlink option is the part that matters: without it Composer copies,…
The layer cache handles an unchanged lock file; a cache mount handles the case where the lock file changed and 90% of the packages did not. Measured over…
2.4 in August adds an audit command that checks the lock file against the Packagist advisory database, which several separate tools had been doing. Reading the lock file…
Composer generates a platform_check.php that aborts at autoload time when the running PHP does not satisfy the constraint, and plenty of projects switched it off during the 2.0…
A path repository symlinks a local directory into vendor, so a change to the package is visible immediately without a version, a tag or a push. The symlink…