- Home
- Package Registries
- Packagist
Packagist
Berlin, Germany
What it is
Packagist is the default Composer package repository, helping PHP developers find public packages and giving Composer a place to retrieve their code. To publish a package, users submit its public repository URL; Packagist periodically checks that repository. New versions come from repository tags, while branches appear as development versions. GitHub, Bitbucket, GitLab, and Gitea hooks or webhooks can enable automatic updates. Its API supports package search, listings, package information, and download statistics. Many endpoints are anonymous; authenticated endpoints accept bearer tokens or a username and API token. Packagist.org is free for publishing open-source PHP packages. The maker states that stable versions on the service cannot be silently replaced with different code. Packagist warns that community-run mirrors may be outdated, broken, or insecure, and says its package metadata is hosted on Bunny.net’s global CDN. The service is for public packages; users needing to share private code are directed to Private Packagist. Packagist Conductors GmbH, registered in Berlin, says it has operated the service since its creation in 2012.
For and against
For
- Free to publish open-source PHP packages.
- Connects updates through four named Git hosting services.
- Provides package search and download statistics through its API.
- Stable versions cannot be silently replaced, according to the maker.
Against
- Packagist.org is for public packages only.
- Community-run mirrors may be outdated, broken, or insecure.
The verdict
Packagist provides a public repository and API for Composer users, with package updates tied to source repositories. Teams that need private-code sharing are directed to Private Packagist.
Who it suits
Packagist suits PHP developers using Composer to discover and manage public project or library dependencies. It is not intended for sharing private code.
Plans and prices
Packagist.org
Free to publish open source PHP packages
Read 4 Oct 2026 · packagist.com
Bronze sponsorship
Sponsor page logos · Social media welcome post · Annual thank-you blog post · Composer GitHub README logo
Read 4 Oct 2026 · packagist.org
Silver sponsorship
Bronze benefits · Shared Slack channel · Priority issue/bug response on GitHub · 15% Private Packagist discount
Read 4 Oct 2026 · packagist.org
Gold sponsorship
Silver benefits · Packagist.org footer logo · 20% Private Packagist discount
Read 4 Oct 2026 · packagist.org
On the record
- API authentication
- Many API endpoints are anonymous, while authenticated endpoints accept bearer tokens or username and API token parameters.packagist.org · read 4 Oct 2026
- Maker
- Packagist Conductors GmbH is registered in Berlin, Germany, and the company says it has operated Packagist.org since its creation in 2012.packagist.com · read 4 Oct 2026
- Mirror security
- Packagist warns that community-run mirrors are unaffiliated and may be outdated, broken, or insecure.packagist.org · read 4 Oct 2026
- Package publishing
- Users publish a package by submitting its public repository URL, after which Packagist periodically crawls it.packagist.org · read 4 Oct 2026
- Private code limit
- Packagist.org is for public packages; the maker directs users who need to share private code to Private Packagist.packagist.org · read 4 Oct 2026
- Public packages
- Packagist aggregates public PHP packages that anyone can install with Composer.packagist.org · read 4 Oct 2026
- Purpose
- Packagist is the default Composer package repository, helping users find packages and telling Composer where to get their code.packagist.org · read 4 Oct 2026
- Search API
- The API supports package search, package listings, package data and download statistics, among other operations.packagist.org · read 4 Oct 2026
- Security
- The site says Packagist.org package metadata is hosted on Bunny.net's global CDN.packagist.org · read 4 Oct 2026
- Stable version integrity
- The maker states that stable Packagist.org versions are immutable and cannot be silently replaced with different code.packagist.com · read 4 Oct 2026
- Support
- Commercial support and consulting for PHP dependency management with Packagist and Composer are available through Private Packagist subscription plans.packagist.org · read 4 Oct 2026
- Update integrations
- Automatic package updates are supported through GitHub, Bitbucket, GitLab, and Gitea hooks or webhooks.packagist.org · read 4 Oct 2026
- Version updates
- New package versions are fetched from repository tags, and branches appear as dev versions.packagist.org · read 4 Oct 2026
- Who it serves
- Packagist serves PHP developers who use Composer to manage project or library dependencies.packagist.org · read 4 Oct 2026
