Top 23 Composer Open-Source Projects

1. Composer

   1 244 29,449 9.6 PHP

   Dependency Manager for PHP

   

   Project mention: Composer 2.10 Release features automatic malware blocking | news.ycombinator.com | 2026-05-28

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. bedrock

   2 40 6,521 6.3 PHP

   WordPress boilerplate with Composer and Git, easier configuration, and an improved folder structure

   

4. Medoo

   3 4 4,940 4.0 PHP

   The lightweight PHP database framework to accelerate the development.

   

5. flex

   4 5 4,224 7.3 PHP

   Composer plugin for Symfony (by symfony)

   

6. Laravel-Zero

   5 10 3,962 6.8 PHP

   A PHP framework for console artisans

   

7. Satis

   6 9 3,275 9.0 PHP

   Simple static Composer repository generator - For a full private Composer repo use Private Packagist

   

   Project mention: Building a Composer Proxy Cache with OpenResty | dev.to | 2025-12-22

   Satis is the official static package repository generator for Composer, creating Packagist-compatible JSON format for private packages.

8. setup-php

   7 31 3,227 9.2 TypeScript

   GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and various tools.

   

9. SecurityAdvisories

   8 7 2,904 9.5

   :closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily

   

   Project mention: An Update on Composer and Packagist Supply Chain Security | news.ycombinator.com | 2026-05-27

   I arrived at a similar model for NPM using hooks in pnpm: https://github.com/captn3m0/npm-sec-feed. I love the work Packagist/Composer is doing in the space.

   I’m now a firm believer that every package manager needs to support hooks globally.

   Composer also supports conflicts which results in this amazing approach of having a meta-package conflict with insecure packages: https://github.com/Roave/SecurityAdvisories.

   Can’t happen in Node, sadly because of language differences.

10. postprocessing

    9 13 2,792 8.9 JavaScript

    A post processing library for three.js. (by pmndrs)

    

    Project mention: Ball Pit | news.ycombinator.com | 2026-03-25

    TRAA basically works by using a history buffer, for example using the last couple of frames, all jittered a little bit to compute the pixel. There's still ghosting and smearing that can happen though because of this technique, so you have methods to counteract like subpixel correction where u increase temporal alpha when velocity is subpixel, but that can introduce some artifacts as well.

    There's also SMAA T2x which the pmndrs team is planning on integrating into their postprocessing package[0]. This cryengine3 slideshow gives a nice overview of antialiasing methods if you're interested: http://iryoku.com/aacourse/downloads/13-Anti-Aliasing-Method...

    [0] https://github.com/pmndrs/postprocessing

    This paper also provides a decent overview of TRAA:

11. laravel-messenger

    10 3 2,571 1.7 PHP

    Simple user messaging package for Laravel

    

12. PHPCompatibility

    11 20 2,291 9.7 PHP

    PHP Compatibility check for PHP_CodeSniffer

    

13. wordplate

    12 7 2,173 8.7 PHP

    A boilerplate for WordPress, built with Composer and designed with sensible defaults.

    

14. SensioLabs Security Check

    13 5 2,122 5.7 PHP

    A database of PHP security advisories

    

    Project mention: A Vulnerability in Libsodium | news.ycombinator.com | 2025-12-30

    This also affected the PHP library, sodium_compat. https://github.com/FriendsOfPHP/security-advisories/pull/756

    I'm planning to spend my evening checking every other Ed25519 implementation I can find to see if this check is missing any where else in the open source ecosystem.

15. laravel-hashids

    14 4 2,058 4.7 PHP

    A Hashids bridge for Laravel

    

16. Hprose-PHP

    15 0 2,017 3.0 PHP

    Hprose is a cross-language RPC. This project is Hprose 3.0 for PHP

    

17. laravel-stats

    16 2 1,748 5.3 PHP

    📈 Get insights about your Laravel or Lumen Project

    

18. composer-patches

    17 11 1,702 7.4 PHP

    Simple patches plugin for Composer

    

19. composer-unused

    18 3 1,679 7.3 PHP

    Show unused composer dependencies by scanning your code

    

20. drupal-project

    19 4 1,563 6.7 PHP

    :rocket: Composer template for Drupal projects. Quick installation via "composer create-project drupal-composer/drupal-project"

    

21. docker-php-nginx

    20 6 1,509 6.0 Dockerfile

    Docker image with PHP-FPM 8.5 & Nginx 1.28 on Alpine Linux

    

22. pusher-http-php

    21 2 1,471 4.8 PHP

    PHP library for interacting with the Pusher Channels HTTP API

    

23. Restler

    22 0 1,380 8.0 PHP

    Zero-boilerplate REST API framework for PHP 8+. Auto-generates routes, docs, validation.

    

24. phpqa

    23 5 1,315 8.6 Dockerfile

    Docker image that provides static analysis tools for PHP

    

    Project mention: When Classes Do Too Much: Using LCOM to Spot 'God Classes' in PHP | dev.to | 2025-08-22

    If you just want to test it quickly without installing anything, you can use the phpqa Docker image.

Composer related posts

• Composer 2.10 Release features automatic malware blocking

  1 project | news.ycombinator.com | 28 May 2026

• An Update on Composer and Packagist Supply Chain Security

  2 projects | news.ycombinator.com | 27 May 2026

• Cursor Introduces Composer 2.5

  2 projects | news.ycombinator.com | 19 May 2026

• GitHub Actions issued GitHub_TOKEN disclosure in GitHub Actions logs

  4 projects | news.ycombinator.com | 13 May 2026

• Mozart: Isolate Composer Dependencies in WordPress Plugins

  2 projects | dev.to | 19 Apr 2026

• Strauss: The Better Mozart for WordPress Plugin Dependency Isolation

  2 projects | dev.to | 19 Apr 2026

• How the WPPF Update Helper Connects Private Plugins to Native WordPress Updates

  2 projects | dev.to | 24 Mar 2026
• A note from our sponsor - SaaSHub
  www.saashub.com | 7 Jun 2026

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com