Port details

devel/php-composer 2.10.3

Dependency Manager for PHP

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: cyberbotx@cyberbotx.com
Packages: latest: php82-composer 2.10.3, php83-composer 2.10.3, php84-composer 2.10.3, php85-composer 2.10.3, php86-composer 2.10.3
Upstream: up to date
Last update: 2026-08-30 to 2.10.3 · 6bb8b42582
Quarterly: 2026Q4: php82-composer 2.10.3, php83-composer 2.10.3, php84-composer 2.10.3, php85-composer 2.10.3, php86-composer 2.10.3
WWW: https://getcomposer.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install php82-composer

# pkg install php83-composer

# pkg install php84-composer

# pkg install php85-composer

# pkg install php86-composer

installs php82-composer 2.10.3, php83-composer 2.10.3, php84-composer 2.10.3, php85-composer 2.10.3, php86-composer 2.10.3 from latest; from quarterly (2026Q4) php82-composer 2.10.3, php83-composer 2.10.3, php84-composer 2.10.3, php85-composer 2.10.3, php86-composer 2.10.3

Port

# cd /usr/ports/devel/php-composer && make install clean

# make -C /usr/ports/devel/php-composer config  # change options first

Size

599 KiB download · 3.5 MiB installed

Depends on

archivers/php82-phar 8.2.35_2, converters/php82-mbstring 8.2.35_2, devel/php82-intl 8.2.35_2, ftp/php82-curl 8.2.35_2, lang/php82 8.2.35_2, security/php82-filter 8.2.35_2, textproc/php82-ctype 8.2.35_2

License

MIT

Options

1 of 1 on in the package: CURL

Note

Size, dependencies, options and messages are those of php82-composer.

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	2.10.3	2.10.3	–
FreeBSD 15	2.10.3	2.10.3	–
FreeBSD 14	2.10.3	2.10.3	2.10.3

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	2.10.3	2.10.3	–
FreeBSD 14	2.10.3	2.10.3	2.10.3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 2.10.3.

Fixed (5)

Show 5 fixed

VuXML entries whose affected range the packaged version has left.

PHP Composer -- Multiple vulnerabilitiesentered 2026-08-27

CVE-2026-59944

PHP Composer -- Multiple vulnerabilitiesentered 2026-04-14

CVE-2026-40176, CVE-2026-40261

Composer -- Multiple command injections via malicious git/hg branch namesentered 2024-06-10

CVE-2024-35241, CVE-2024-35242

Composer -- Code execution and possible privilege escalationentered 2024-02-08

CVE-2024-24821

Remote Code Execution via web-accessible composerentered 2023-09-29

CVE-2023-43655

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (84)

2020-12-21 16:14Guido Falsi (madpilot) · 1.10.19

Update php-composer to 1.10.19.

Also add CONFLICTS for upcoming version 2.x port.

PR:		252018
Approved by:	Naram Qashat <cyberbotx@cyberbotx.com>

8d76c89f62

2020-10-23 09:37Guido Falsi (madpilot) · 1.10.15

Update php-composer to 1.10.15

PR:		250476
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

2d949faaf9

2020-08-17 22:52Guido Falsi (madpilot) · 1.10.10

Update php-composer to 1.10.10

PR:		248711
Approved by:	Naram Qashat <cyberbotx@cyberbotx.com>

68797b2e2b

2020-06-26 19:48Guido Falsi (madpilot) · 1.10.8

Update php-composer to 1.10.8

PR:		247566
Approved by:	cyberbotx@cyberbotx.com (maintainer)

2ee50685dc

2020-04-26 16:21Danilo G. Baio (dbaio) · 1.10.5

devel/php-composer: Update to 1.10.5

Changelog:	https://github.com/composer/composer/blob/1.10.5/CHANGELOG.md

PR:		245574
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)
MFH:		2020Q2 (blanket: bugfix release(s))

72fdd541b4

2020-03-13 19:33Jochen Neumeister (joneum) · 1.10.0

Update to 1.10.0

Changelog: https://github.com/composer/composer/releases

PR:		244789
Reported by:	joneum
Approved by:	cyberbotx@cyberbotx.com (maintainer)
Sponsored by:	Netzkommune GmbH

00215514ba

2020-01-20 19:21Jochen Neumeister (joneum) · 1.9.2

Update to 1.9.2

Changelog: https://github.com/composer/composer/releases/tag/1.9.2

PR:		243458
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)
Sponsored by:	Netzkommune GmbH

5aff1ea67f

2019-12-08 00:18Tobias C. Berner (tcberner) · 1.9.1

devel/php-composer: Update to 1.9.1

PR:		242260
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com>  (maintainer)

b437b96c37

2019-08-19 14:47Guido Falsi (madpilot) · 1.9.0

Update php-composer to 1.9.0

PR:		239948
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

4cf4c96169

2019-06-30 21:58Steve Wills (swills) · 1.8.6

devel/php-composer: Update to 1.8.6

PR:		238504
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

b8c5a9eb8b

2019-05-17 18:49Guido Falsi (madpilot) · 1.8.5

Upgrade composer to 1.8.5

PR:		237946
Submitted by:	myself
Approved by:	cyberbotx@cyberbotx.com (maintainer)

6708ee073c

2019-02-18 22:06Sunpoet Po-Chuan Hsieh (sunpoet) · 1.8.4

Update to 1.8.4

Changes:	https://github.com/composer/composer/releases
PR:		235812
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

a192da4d97

2019-01-20 21:50Sunpoet Po-Chuan Hsieh (sunpoet) · 1.8.0

Update MASTER_SITES and WWW

Approved by:	portmgr (blanket)

4450817ac9

2018-12-13 23:08Guido Falsi (madpilot) · 1.8.0

Update devel/php-composer to 1.8.0

PR:		233358
Submitted by:	pfg, myself
Approved by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

fe14fc9491

2018-08-22 22:00Steve Wills (swills) · 1.7.2

devel/php-composer: Update to 1.7.2

PR:		230819
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

6df4174e64

2018-06-09 23:25Steve Wills (swills) · 1.6.5

devel/php-composer: Update to 1.6.5

PR:		228839
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

2f71870380

2018-04-12 17:39Guido Falsi (madpilot) · 1.6.3

- Update php-composer to 1.6.3 - Add php flavors support - Add updating note due to package name change

PR:			227418
Submitted by:		me
Approved by:		cyberbotx@cyberbotx.com (maintainer),
			portmgr (mat)
Differential Revision:	https://reviews.freebsd.org/D15026

40044c8f62

2018-01-17 20:18Guido Falsi (madpilot) · 1.6.2

Update php-composer to 1.6.2

PR:		225192
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com>

319961ff27

2017-10-18 10:39Jochen Neumeister (joneum) · 1.5.2

devel/php-composer: Update from 1.4.2 to 1.5.2

-Changelog:
  https://github.com/composer/composer/releases/tag/1.4.3
  https://github.com/composer/composer/releases/tag/1.5.0
  https://github.com/composer/composer/releases/tag/1.5.1
  https://github.com/composer/composer/releases/tag/1.5.2

Add missing mbstring module to avoid fatal PHP error

PR:		223063
Reported by:	eqvvs <freebsd@flornet.de>
Approved by:	Naram Qashat <cyverbotx@cyberbotx.com> (maintainer), tz (mentor)
MFH:	2017Q4
Differential Revision:	https://reviews.freebsd.org/D12711

4c14f3ef38

2017-07-30 15:21Danilo G. Baio (dbaio) · 1.4.2

devel/php-composer: Update to 1.4.2

Changes:	https://github.com/composer/composer/releases/tag/1.4.2

PR:		221061
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

bb03384772

2017-03-18 23:31Sunpoet Po-Chuan Hsieh (sunpoet) · 1.4.1

Update to 1.4.1

- While I'm here, add NO_ARCH

Changes:	https://github.com/composer/composer/releases
PR:		217804
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

46e0ea2bc8

2016-12-08 17:02Torsten Zuehlsdorff (tz) · 1.2.4

devel/php-composer: Update from 1.2.1 to 1.2.4

Changelog: https://github.com/composer/composer/blob/1.2.4/CHANGELOG.md

PR:           215139
Submitted by: Gasol Wu <gasol.wu@gmail.com>
Approved by:  Naram Qashat (maintainer), mentors (implicit)

c97b7ca2fc

2016-10-11 11:01Torsten Zuehlsdorff (tz) · 1.2.1_1

devel/php-composer: add missing PHP-module "filter"

The port is not usable without the module.

Approved by: cyberbotx@cyberbotx.com (maintainer), pi (mentor)

fc9876cb61

2016-09-21 09:06Wen Heping (wen) · 1.2.1

- Update to 1.2.1

PR:		212870
Submitted by:	cyberbotx@cyberbotx.com(maintainer)

53d2a66ebd

2016-07-29 17:18Pawel Pekala (pawel) · 1.2.0

Update to version 1.2.0

PR:		211428
Submitted by:	Naram Qashat (maintainer)

9c53a8c25a

2016-05-29 10:55Pawel Pekala (pawel) · 1.1.0

Update to version 1.1.0

PR:		209536
Submitted by:	Yonas Yanfa
Approved by:	maintainer

ddaff681f5

2016-04-01 16:00Mathieu Arnold (mat) · 1.0.0.a11_1

Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight

4e1b79a0a6

2015-11-26 14:36Mathieu Arnold (mat) · 1.0.0.a11_1

Add missing dependencies that it wanted when I tried to use it.

Sponsored by:	Absolight

dd50b56264

2015-11-24 14:38Bartek Rutkowski (robak) · 1.0.0.a11

devel/php-composer: update 1.0.0-alpha10 -> 1.0.0-alpha11

PR:		204562
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com> (maintainer)

95647cc2a0

2015-04-22 14:28Vanilla I. Shu (vanilla) · 1.0.0.a10

Upgrade to 1.0.0-alpha10.

PR:		199598
Submitted by:	maintainer

4e2777d4e4

2015-02-09 21:05Pawel Pekala (pawel) · 1.0.0.a9

- Update to version 1.0.0-alpha9 - Submitter is new maintainer

PR:		196974
Submitted by:	Naram Qashat <cyberbotx@cyberbotx.com>

863ab888df

2014-06-30 07:51Eitan Adler (eadler) · 1.0.0.a8.20140419

multiple: reset gslin's maintainer 	By request of Gea-Suan Lin <gslin@gslin.org> - reset ports to ports@FreeBSD.

Gea-Suan Lin's work is much appreciated.

Approved by:	portmgr (implicit) (not really, skipping NO_STAGE check)

e6ab3ba661

2014-04-21 09:52Ruslan Makhmatkhanov (rm) · 1.0.0.a8.20140419

devel/php-composer: update to 1.0.0-alpha8.20140419

- upgrade to 1.0.0-alpha8.20140419.
- add intl, openssl and phar dependencies.

PR:		188796
Submitted by:	    Gea-Suan Lin <gslin@gslin.org> (maintainer)

5a0d7f3f94

2014-02-23 16:26Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.0.a8.20140223

- Add php-composer 1.0.0.a8.20140223 - While I'm here:   - Use DISTVERSION   - Pet portlint:     - Use DISTNAME and EXTRACT_SUFX instead of DISTFILES     - Use PLIST_FILES instead of PLIST

Composer is a tool for dependency management in PHP. It allows you to declare
the dependent libraries your project needs and it will install them in your
project for you.

WWW: http://getcomposer.org/

PR:		ports/186972
Submitted by:	Gea-Suan Lin <gslin@gslin.org>

b3bf24a8f2

www/py-tornado 3 unaddressed · 5.3	Oct 26
sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21