Packagist
packagist.org
What it is
Packagist is the default Composer package repository for PHP developers. It helps them discover public packages and tells Composer where to retrieve the code. To publish, a user submits a public repository URL, which Packagist checks periodically. New versions are gathered from repository tags, while branches are shown as development versions. Hooks or webhooks from GitHub, Bitbucket, GitLab, and Gitea can trigger automatic package updates. The API supports searching and listing packages, retrieving package data, and viewing download statistics, among other operations. Many endpoints can be used anonymously; authenticated ones accept bearer tokens or a username and API token. Packagist.org is free to publish open-source PHP packages. The maker says stable versions cannot be silently replaced with different code. The service is for public packages, and users seeking to share private code are directed to Private Packagist. Packagist Conductors GmbH, registered in Berlin, says it has operated Packagist.org since its creation in 2012. Separate sponsorship plans are available at 2500.00 EUR, 5000.00 EUR, and €8,000 a month, each with an annual commitment.
Spec sheet
- Purpose
- Packagist is the default Composer package repository, helping users find packages and telling Composer where to get their code.Read 4 Oct 2026 · packagist.org
- Security
- The site says Packagist.org package metadata is hosted on Bunny.net's global CDN.Read 4 Oct 2026 · packagist.org
- Support
- Commercial support and consulting for PHP dependency management with Packagist and Composer are available through Private Packagist subscription plans.Read 4 Oct 2026 · packagist.org
- Headquarters
- Berlin, GermanyRead 28 Sep 2026 · packagist.org
- Founded
- 2012Read 28 Sep 2026 · packagist.org
- Maker
- Packagist Conductors GmbH is registered in Berlin, Germany, and the company says it has operated Packagist.org since its creation in 2012.Read 4 Oct 2026 · packagist.com
- API authentication
- Many API endpoints are anonymous, while authenticated endpoints accept bearer tokens or username and API token parameters.Read 4 Oct 2026 · packagist.org
- Mirror security
- Packagist warns that community-run mirrors are unaffiliated and may be outdated, broken, or insecure.Read 4 Oct 2026 · packagist.org
- Package publishing
- Users publish a package by submitting its public repository URL, after which Packagist periodically crawls it.Read 4 Oct 2026 · packagist.org
- Private code limit
- Packagist.org is for public packages; the maker directs users who need to share private code to Private Packagist.Read 4 Oct 2026 · packagist.org
- Public packages
- Packagist aggregates public PHP packages that anyone can install with Composer.Read 4 Oct 2026 · packagist.org
- Search API
- The API supports package search, package listings, package data and download statistics, among other operations.Read 4 Oct 2026 · packagist.org
- Stable version integrity
- The maker states that stable Packagist.org versions are immutable and cannot be silently replaced with different code.Read 4 Oct 2026 · packagist.com
- Update integrations
- Automatic package updates are supported through GitHub, Bitbucket, GitLab, and Gitea hooks or webhooks.Read 4 Oct 2026 · packagist.org
- Version updates
- New package versions are fetched from repository tags, and branches appear as dev versions.Read 4 Oct 2026 · packagist.org
- Who it serves
- Packagist serves PHP developers who use Composer to manage project or library dependencies.Read 4 Oct 2026 · packagist.org
Plans and prices
Packagist.org Free Free to publish open source PHP packages Read 4 Oct 2026 · packagist.com
Bronze sponsorship €2,500 a month Annual commitment Sponsor page logos · Social media welcome post · Annual thank-you blog post · Composer GitHub README logo · 10% Private Packagist discount Read 4 Oct 2026 · packagist.org
Silver sponsorship €5,000 a month Annual commitment Bronze benefits · Shared Slack channel · Priority issue/bug response on GitHub · 15% Private Packagist discount Read 4 Oct 2026 · packagist.org
Gold sponsorship €8,000 a month Annual commitment Silver benefits · Packagist.org footer logo · 20% Private Packagist discount Read 4 Oct 2026 · packagist.org
Strong points and limits
Strong points
- Free to publish open-source PHP packages
- Repository tags supply new package versions
- Hooks support automatic updates from four providers
- API includes search and download statistics
- Stable versions cannot be silently replaced
Limits
- Packagist.org is for public packages only
- Private-code sharing requires a different service
- Sponsorship plans require annual commitment
Who it suits
Packagist suits PHP developers using Composer to manage project or library dependencies. It is intended for public packages, not private-code sharing.
Verdict
Packagist provides a public package source and update path for Composer users, with API access and repository hooks. Developers needing private-code sharing should look to Private Packagist instead.
Where Specifiction places it
- Package Registries#13 of 288.0
