Issues

• Rename $allowPartialAdvisories to $preferFullAdvisories in advisory loading APIs

  composer/composer#13150 · Filter by author Seldaek opened on Oct 21, 2026 · 3.0

• Abandoned packages not always reported

  Bug

  composer/composer#13122 · Filter by author willrowe opened on Oct 15, 2026 · 2.12

• Allow installing PIE extensions as dev packages for stub distribution

  Feature

  composer/composer#13112 · Filter by author 1ma opened on Oct 8, 2026

• Options don't get passed to scripts as additional arguments

  Bug

  composer/composer#13038 · Filter by author JKingweb opened on Aug 14, 2026
  1

• Partial update with -w/-W reports a symlinked path-repository package's locked dependency as "not loaded, likely because it conflicts with another require"

  composer/composer#13024 · Filter by author pbowyer opened on Aug 7, 2026 · 2.12

• Conflict handling with require --no-update-dev

  Bug

  composer/composer#13017 · Filter by author cracksalad opened on Aug 4, 2026
  2

• weird error preventing composer from working properly

  Support

  composer/composer#13003 · Filter by author stormybearfla opened on Jul 24, 2026
  1

• Introduce an equivalent of npm audit fix

  Feature

  composer/composer#12989 · Filter by author glaubinix opened on Jul 20, 2026 · Nice To Have

• composer audit - list of ignored CVEs from file/parameter

  Feature

  composer/composer#12954 · Filter by author bartiii opened on Jun 26, 2026 · Nice To Have
  1

• A composer update that only updates metadata for a package, generates an upgrade to the same version without additional context

  Feature

  composer/composer#12944 · Filter by author glaubinix opened on Jun 23, 2026 · Nice To Have
  1

• Advisory ignore list expiry

  Feature

  composer/composer#12943 · Filter by author wouterj opened on Jun 22, 2026 · Nice To Have

• RFC: Dependency Lifecycle Scripts

  Feature

  composer/composer#12938 · Filter by author Tak-Pesar opened on Jun 18, 2026
  2

• getcomposer.org installer downloads: hosting availability in CI

  Support

  composer/composer#12928 · Filter by author Jimbolino opened on Jun 9, 2026
  3

• Globally (homedir) installed composer fails to update itself

  Bug

  composer/composer#12922 · Filter by author HenkPoley opened on Jun 5, 2026
  5

• Composer Audit, No security vulnerability advisories found.

  composer/composer#12921 · Filter by author sirlionlabs opened on Jun 5, 2026

• Support block-scope for custom dependency policies

  Feature

  composer/composer#12917 · Filter by author eiriksm opened on Jun 3, 2026
  1

• Fine-grained GitHub PATs cause 403 on public-repo dist fetches because github-oauth/http-basic auth is host-wide

  Feature

  composer/composer#12915 · Filter by author atymic opened on Jun 3, 2026 · Nice To Have
  1

• Clear cached file marked as malware

  Feature

  composer/composer#12908 · Filter by author naderman opened on Jun 1, 2026
  1

• OOM in RuleSetGenerator::addConflictRules during composer install on 2.10.0 (works on 2.9.8)

  Bug

  composer/composer#12906 · Filter by author erikvdhorst-idil opened on Jun 1, 2026 · 2.11
  10

• Require approval of plugin dependencies

  Feature

  composer/composer#12900 · Filter by author naderman opened on May 29, 2026

• Support semantic version constraints with immutable commit pinning

  Feature

  composer/composer#12879 · Filter by author ghostwriter opened on May 25, 2026
  11

• Enable Composer repositories to enforce they are the only remote Composer repository

  Feature

  composer/composer#12872 · Filter by author naderman opened on May 20, 2026
  1

• System level configuration enforcement

  Feature

  composer/composer#12828 · Filter by author naderman opened on May 6, 2026

• Trusted projects / paths & safe-mode

  Feature

  composer/composer#12816 · Filter by author naderman opened on Apr 25, 2026
  1

• OIDC Authentification

  Feature

  composer/composer#12775 · Filter by author shyim opened on Mar 24, 2026 · Nice To Have
  3