Download Latest Version
2.10.2 source code.zip (808.1 kB)
Get an email when there's a new version of Composer
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| composer.phar | 2026-07-01 | 2.4 MB | |
| composer.phar.asc | 2026-07-01 | 589 Bytes | |
| 2.2.29 source code.tar.gz | 2026-07-01 | 572.7 kB | |
| 2.2.29 source code.zip | 2026-07-01 | 796.2 kB | |
| README.md | 2026-07-01 | 651 Bytes | |
| Totals: 5 Items | 3.8 MB | 0 | |
- Security: Validate package names (GHSA-499r-g7pc-vmp9)
- Security: Validate package bin paths against path traversal (GHSA-gjfg-22fp-rrxx)
- Security: Sanitize URL-embedded usernames/token in verbose output (GHSA-g6xq-892h-64w3)
- Security: Only follow HTTP redirects from HTTP responses (#12948)
- Security: Prevent phar metadata unserialization on unsafe PHP versions (#12946)
- Security: Sanitize JSON parse errors in http responses to avoid leaking response body data (#12959)
- Fixed GitHub token validation to be even more relaxed (#12856)
Full Changelog: https://github.com/composer/composer/compare/2.2.28...2.2.29