Nils Adermann @naderman
Co-Founder of @packagist / https://t.co/J7OZsciXbE and Co-Creator of #composerphp - he/him - @[email protected] naderman.de Berlin, Germany Joined January 2008-
Tweets8K
-
Followers5K
-
Following1K
-
Likes23K
Ever found yourself accidentally merging changes to the public API of a PHP package and regretting it later? I made a GitHub Action to help prevent that. seld.be/notes/surfacin…
The Composer CLI is part of your supply chain. Older versions miss the protections in 2.10 and carry known CVEs of their own. Private Packagist customers can now enforce which Composer client versions can talk to their repository. #php #phpc #composerphp
@oliverheck @enunomaduro @AikidoSecurity @packagist Sorry I don't understand your question? The attack vector this protects from is a malicious actor having access to the GitHub repository, so they can typically modify anything there.
@oliverheck @enunomaduro @AikidoSecurity @packagist This is pointless right now as an attacker can control the release datetime in the package metadata. That's why we haven't shipped it in Composer yet. It'll become a config dependency policy in Composer as soon as we've addressed this on packagist.org.
@enunomaduro @AikidoSecurity @packagist Not possible in the current architecture. So something we'll consider after rebuilding the entire publication process for staged releases. But got to keep the risks and trade offs in mind. What if aikido.has an outage for example.
php devs, we no longer need to duct-tape python scripts just to parse a pdf 😭 launching Parsel: a fast memory efficient local document parser for PHP. pdfs, office docs & images → text, structured data, bboxes, screenshots. built for AI/RAG, NLP, invoices, search, and messy docs. composer require shipfastlabs/parsel
confirmed… next week i'll be chatting irl on stream with @naderman, co-creator of composer, about everything the composer team is doing in light of the recent supply chain attacks
⛔ Composer policies block flagged malware, but only on 2.10. A CI image running an old Composer version, or a project disabling the policy, still installs flagged versions. Private Packagist now blocks these at the registry, on any client. #php #phpc #composerphp
🛡️ Composer's download fallbacks can silently undermine repository security: A Private Packagist URL blocked for a malware-flagged version falls back to GitHub or a source clone. Two new Private Packagist options close it off. #php #phpc #composerphp
I realized I was never going to get to adding zizmor to all my repos so I made a claude skill to let it do the grunt work. You can use it too, if it helps more busy/lazy people to secure their GitHub repos I am glad! See github.com/Seldaek/zizmor…
We recommend you change the default permissions for GitHub Actions GITHUB_TOKENs to read-only. Grant elevated permissions only where necessary. Use zizmor to analyze your GitHub Actions: github.com/zizmorcore/ziz… see also: phpunit.expert/articles/harde…
Composer 2.10 is out. Native malware filtering via @AikidoSecurity, enabled by default on @packagist. Plus a unified config.policy framework, deprecated source fallback, and wildcards in --with. #php #phpc #composerphp
Today we published our Impact and Transparency Report for 2025. We are incredibly grateful for our sponsors, partners, contractors, and individual financial contributors for without them, none of our work would be possible. 💙 🐘thephp.foundation/blog/2026/05/2… #php #opensource
🔒An update on Composer & Packagist supply chain security: what's in place, what ships this week with Composer 2.10 (dependency policies, immutable versions), and what comes next. If you maintain PHP packages, enable MFA now! #php #phpc #composerphp
introducing laravel moat as an open source maintainer, recent supply chain attacks in the ecosystem made me want a simple cli to audit the security of my GitHub organizations and repositories built in Rust. for any open source project on GitHub
@enunomaduro @packagist @npmjs Automatic CI actions build releases and push them, or in PHP you do a git tag. This appears as a staged (hidden) release on the registry. The maintainer then needs to publish it with 2FA.
As an OSS maintainer, my new rule is that anything a frontier model can find with some reasonable effort is a 0-day. Hence why I'm now shipping security releases on public holidays.
@mitsuhiko They kept pushing new commits and tags even while we were already aware. Had to entirely remove the package on the registry to put an end to us redistributing the malware that is still present on GitHub now.
@mitsuhiko My impression is attacks on IDE plugins are enabling this. When attackers can just push commits & tags to legit repos, what safeguarded PHP Composer/Packagist and Go just falls apart. Wish I had had a way yesterday to get GitHub to block pushes to the repos
@[email protected]... @Ocramius
19K Followers 1K Following I don't check this account anymore: find me at https://t.co/qmMI0oKcN2 instead.
nunomaduro @enunomaduro
66K Followers 349 Following staff software engineer at @laravelphp · speaker · content creator · open-source contributor · created @pestphp, pint, pail, larastan, and more.
Frank de Jonge @frankdejonge
14K Followers 453 Following Building https://t.co/jUqnlYhVED / typo conniosseur / Open-source has-been / Author of Flysystem - Flystorage and EventSauce - recovering from 10+ years of bad sleep
Marcel Pociot 🧪 @marcelpociot
70K Followers 942 Following Building @getpolyscope, https://t.co/JvEOgCzGsT, https://t.co/HbdEOhayav, https://t.co/vuTdNhzpMW, and more. Follow my product dev journey. CTO at @beyondcode
Ondřej Mirtes @OndrejMirtes
9K Followers 514 Following Creating @phpstan by day and night. 👨🏻💻👨👩👦👦🎮🚴♂️
Nicolas Grekas 💙�... @nicolasgrekas
11K Followers 432 Following @Symfony principal core-team member, @thephpf admin board. #PHP never dies! @ESPCI_Alumni+@HECAlumni
Jordi Boggiano @seldaek
19K Followers 809 Following Co-Founder of @packagist / #ComposerPHP – Head of Engineering at @TeamupCalendar @seld.be on bsky
Kévin Dunglas @dunglas
14K Followers 527 Following Founder of @coopTilleuls, a tech worker cooperative. Free Software creator: @ApiPlatform, @MercureRealTime, #FrankenPHP and many more!
Fabien Potencier @fabpot
47K Followers 78 Following @upsundotcom CTO @Symfony founder and project lead
Ryan Weaver @weaverryan
11K Followers 466 Following Glioblastoma (brain cancer - https://t.co/8AhUp8jzqH) fighter, writer for https://t.co/pkd3UeL5ao & proud Symfony core member
Matthieu Napoli @matthieunapoli
8K Followers 386 Following Building ▸ @brefphp | https://t.co/JdB7Dfmi9T ▸ https://t.co/Hsh5M2LGEE ▸ https://t.co/dvlBuoaVqO ▸ https://t.co/syDdV5HgqS AWS serverless hero
Matt Stauffer @mattstauffer
34K Followers 493 Following CEO @tightenco. Host @pragmaticaifm, @LaravelPodcast, & @businesslaravel. Wife guy to 💍 @ImaniVJones. “Worst twerker ever, best Dad ever" –My daughter
Jonathan H. Wage @jwage
8K Followers 595 Following Founder @TradersPostInc. I like to build stuff. Trading automation software is my thing. Open-Source software PHP @doctrineproject @symfony.
Aaron Francis @aarondfrancis
60K Followers 2K Following Sincere poster. No cynicism. Dad to two sets of twins! - https://t.co/WfYvVaHpTW - https://t.co/QG0tWQcm92 - https://t.co/RuC1MT0UuJ - @MostlyTechPod
Dries Vints @driesvints
31K Followers 316 Following 💰 Billing engineer at @laravelphp working on Cloud ☁️ • 💻 Building @moneytreesapp, @eventyio & @laravelio • ⭐️ @github Star
Matthias Noback @matt... @matthiasnoback
10K Followers 1K Following Software developer, code gardener, regular speaker, blogger, book author, and workshop host. @[email protected]
Pauline Vos @vanamerongen
4K Followers 661 Following Software engineer and public speaker and athlete. Guess I'm here again for the time being. Building an online Git course!
A concerned Netizen @Bigk009
481 Followers 3K Following Software god || Sapiosexual || Connoisseur of Arts || Social Activist. Co-founder/CTO @ServertapCloud
João Machado @joaoffm
390 Followers 1K Following DevOps & Tech Lead at @creativetech_pt @devoteampt . Mastering #php #laravel. Shapping up with #crossfit. #sporting
Grant Bennett @grantbennett
578 Followers 448 Following Ex-Finance Professional turned Software Developer. Lover of PHP/SQL. Laravel & Vue fan. Likes writing tests 🤷🏻♂️. Also 📸 🎮
Maan Kobciye @DualeAdam12
5 Followers 75 Following
DORA(ドラ) @ne_indk
15 Followers 116 Following Rarely on X, just for checking trends. Silently building internal stuff with #laravel. Almost 15 years of PHP dev!🗼 東京のリモートSE(ちょこちょこコード書いてます)🇯🇵 🇳🇵
Oliver Heck @oliverheck
91 Followers 813 Following Laravel & AWS partner for SaaS platforms & agencies that need to ship fast | Scaling platforms to millions of users | Founder @ Black Bits
🏔️ Peak @peaklabs_dev
2K Followers 777 Following 👨💻 Full-Time Entrepreneur & 👨🍳 Core Developer at coolLabs on @coolifyio. 🚧 Building OSS at https://t.co/91ji7n8yrq
Tomás @tomloprod
64 Followers 363 Following
Khaled Al Wakeel @WakeelKhaled
1K Followers 1K Following Geek, Software Engineer, Judo player, football lover .. #ahly #barcelona #man_utd #laravel
Sander Muller @sander_scode
361 Followers 878 Following Software developer & cryptocurrency enthusiast. You can also find me on GitHub: https://t.co/J5RncWcdk7
Alex Rodriguez @AlexR1712
5K Followers 5K Following Son of The Internet, Glocal and Systems Engineering student, entrepreneur, geek and technology enthusiast.
9Crypt Labs @gotMeAHaskell
842 Followers 3K Following Building on #Cardano. Not financial, investment, legal, or tax advice. Reposts/Likes do not imply endorsement.
Vinicius Barizon @vini_barizon
1 Followers 140 Following
Filip Ganyicz @ganyicz
2K Followers 831 Following Laravel developer • Pushing the limits of Livewire and Alpine w/ Bond • Working on Blaze & Flux UI @ Livewire
Jesus Toledo @JesusTo22367629
0 Followers 18 Following
Duncan McClean @_duncanmcclean
1K Followers 148 Following Christ follower. Weegie. Full of useless facts. 🧑💻 Software Developer @statamic 🚧 Building @clearinghousehq and https://t.co/eqP2wcRuYK
Monteiro @hmmonteiro
545 Followers 776 Following @spotahome | Software Engineer Turning ideas into real-world products
Maria E Kibtia @KibtiaE
2 Followers 78 Following
Martha Nieto 🦋(mmm... @MmmarRTHa
475 Followers 789 Following Turning the page of my life, I’m a Software Engineer | @UnADM_Mx | Linux user | Cat mom🐈 ♑️ 🇲🇽 | Elixir Enthusiast
ことみん@FE・PHP... @kotomin_m
8K Followers 8K Following I’m Kotomin! Speaker at @LaravelLiveJP 2026 フロントエンド・PHPカンファレンス北海道2026実行委員長 @fe_phpcon_do #frontend_phpcon_do / #技育プロジェクト 公式メンター / 高専卒 / SRE
Bartłomiej Gajda @thewebard
13 Followers 385 Following PHP developer with 10+ years of experience. Specialized in Laravel & Filament, focused on scalable systems and high-quality packages.
Piotr Wasilewski @soimil
14 Followers 126 Following Building @expiro_io in public — contract renewal tracker for agencies and freelancers. Developer, founder. 🇵🇱 in 🇬🇧
Tim Sterker @tsterker
21 Followers 247 Following
Theodore Brown @theodorejb
215 Followers 324 Following I build clean, efficient software with PHP, SQL, and TypeScript. Simplicity is the ultimate sophistication.
onatcer @onatcer
4K Followers 2K Following webdev/webdesign, Wahlplakatgeneratorenmensch, ich mach komische neuland projekte, wer mich siezt wird geblockt, he/him tech/english account: @bufferhead_
Shane Saunders @Gnative
122 Followers 603 Following Founder of @contou_rs. Ski touring/ Ski snowboard safety focused app. Full Stack developer. Addicted to snow.
Konstantin @kauffinger
220 Followers 427 Following I enjoy solving problems in Laravel, NVIM, and LLMs Tech Lead @ InnoBrain https://t.co/puXQPhxCx3
Nicolas Charpentier @charpeni_
198 Followers 332 Following Software Engineer at @useshortcut👨💻 React Native Core Contributor
Cander @Cander_zhu
2K Followers 3K Following 💻 Developer | PHP & Python & Go 🤖 AI Indie Dev | Vibe Coding ✍️ Self-Media | Overseas Projects | AI研究探索者 专注内容输出 | 欢迎技术&生活交流 🤝
Richard Banks @richbnaks7
81 Followers 500 Following
Raj Siva-Rajah @binaryfire
128 Followers 628 Following Co-creator of @HypervelPHP. DevOps engineer. Game developer. Singer in @thesunpilots.
Emanuel Lacerda @_macerd
23 Followers 216 Following Software Developer in https://t.co/hcemaMdC7u Laravel & Livewire
James Sims @freesimcard1
409 Followers 3K Following Twenty years inside the agency stack. Now shipping AI tools for media and marketing teams. Leader and operator turned builder. notes from inside the stack.
Iosif Chatzimichail @afonic
117 Followers 288 Following Founder @ https://t.co/fdZ6n3OeQS Web developer and digital marketing specialist.
danielhe4rt.php @danielhe4rt
42K Followers 2K Following 🇧🇷 senior developer | 27 y/o doing useless code since 2011 php and laravel is the way!! talking about: php + rust + postgres + open source and communities
Mateus Guimarães @mateusjatenee
6K Followers 887 Following engineer @laravelphp, teacher and speaker. I mostly talk about programming and powerlifting. Free Lessons here 👉🏻 https://t.co/f7R1qQAEkEPHP Classes of Object... @phpclasses
43K Followers 80 Following Follow PHPClassesEarly for early insights about upcoming site features. Free ready to use contributed PHP class scripts, book reviews, jobs, specialist forums
@[email protected]... @Ocramius
19K Followers 1K Following I don't check this account anymore: find me at https://t.co/qmMI0oKcN2 instead.
nunomaduro @enunomaduro
66K Followers 349 Following staff software engineer at @laravelphp · speaker · content creator · open-source contributor · created @pestphp, pint, pail, larastan, and more.
Freek Van der Herten @freekmurze
68K Followers 545 Following PHP developer at @spatie_be, built @getmailcoach, https://t.co/IRUtuG0FwZ, @ohdearapp, @flareappio, https://t.co/k3EmwxZNpZ, blogging at https://t.co/a3spVy88VN
Frank de Jonge @frankdejonge
14K Followers 453 Following Building https://t.co/jUqnlYhVED / typo conniosseur / Open-source has-been / Author of Flysystem - Flystorage and EventSauce - recovering from 10+ years of bad sleep
Marcel Pociot 🧪 @marcelpociot
70K Followers 942 Following Building @getpolyscope, https://t.co/JvEOgCzGsT, https://t.co/HbdEOhayav, https://t.co/vuTdNhzpMW, and more. Follow my product dev journey. CTO at @beyondcode
Ondřej Mirtes @OndrejMirtes
9K Followers 514 Following Creating @phpstan by day and night. 👨🏻💻👨👩👦👦🎮🚴♂️
Nicolas Grekas 💙�... @nicolasgrekas
11K Followers 432 Following @Symfony principal core-team member, @thephpf admin board. #PHP never dies! @ESPCI_Alumni+@HECAlumni
Jordi Boggiano @seldaek
19K Followers 809 Following Co-Founder of @packagist / #ComposerPHP – Head of Engineering at @TeamupCalendar @seld.be on bsky
Kévin Dunglas @dunglas
14K Followers 527 Following Founder of @coopTilleuls, a tech worker cooperative. Free Software creator: @ApiPlatform, @MercureRealTime, #FrankenPHP and many more!
Povilas Korop | Larav... @PovilasKorop
63K Followers 455 Following ~20 yrs in web-dev, now mostly Laravel. My Laravel courses: https://t.co/HRUAJdMRZL My Youtube channel: https://t.co/qPQAkaov2F
Tomas Votruba @VotrubaT
6K Followers 29 Following ✍️ Writing a book about final solution to legacy https://t.co/ffWET1OvFW 😎 Upgrading PHP legacy projects 🤖 Automating PHP code with @rectorphp
Brent @brendt_gd
22K Followers 0 Following New book: https://t.co/LXBKSLUZKU https://t.co/Ja65cgCIAx https://t.co/cB3QseGqiV https://t.co/7ZFnp8Mrxt Developer Advocate for PHP @jetbrains
Fabien Potencier @fabpot
47K Followers 78 Following @upsundotcom CTO @Symfony founder and project lead
Ryan Weaver @weaverryan
11K Followers 466 Following Glioblastoma (brain cancer - https://t.co/8AhUp8jzqH) fighter, writer for https://t.co/pkd3UeL5ao & proud Symfony core member
Matt Stauffer @mattstauffer
34K Followers 493 Following CEO @tightenco. Host @pragmaticaifm, @LaravelPodcast, & @businesslaravel. Wife guy to 💍 @ImaniVJones. “Worst twerker ever, best Dad ever" –My daughter
Jonathan H. Wage @jwage
8K Followers 595 Following Founder @TradersPostInc. I like to build stuff. Trading automation software is my thing. Open-Source software PHP @doctrineproject @symfony.
Aaron Francis @aarondfrancis
60K Followers 2K Following Sincere poster. No cynicism. Dad to two sets of twins! - https://t.co/WfYvVaHpTW - https://t.co/QG0tWQcm92 - https://t.co/RuC1MT0UuJ - @MostlyTechPod
Dries Vints @driesvints
31K Followers 316 Following 💰 Billing engineer at @laravelphp working on Cloud ☁️ • 💻 Building @moneytreesapp, @eventyio & @laravelio • ⭐️ @github Star
Alpha-Omega @AlphaOmegaOSS
128 Followers 8 Following Building a world where critical #opensource projects are secure and security vulnerabilities are found and fixed quickly | Project under @theopenssf
Mateus Guimarães @mateusjatenee
6K Followers 887 Following engineer @laravelphp, teacher and speaker. I mostly talk about programming and powerlifting. Free Lessons here 👉🏻 https://t.co/f7R1qQAEkE
Chief Naming Officer @egulias
958 Followers 613 Following Dad. Bringing TMS to emerging markets with Cofers. Opinions are of my own. Also on @egulias .bsky.social
Alexandre Daubois @alexdaubois
2K Followers 195 Following cto @coopTilleuls / @symfony+#frankenphp+#php core teams / creator of ember / worldwide speaker
Kiril Videlov @krlvi
658 Followers 816 Following Co-founder / CTO @gitbutler, software enthusiast, @ycombinator alumn
sunil pai @threepointone
52K Followers 3K Following 🎈 Entscheidungsproblem. https://t.co/DISzWsXdnE forky mcforkface.
The Claude Portfolio @theaiportfolios
240K Followers 15 Following *Not affiliated with Anthropic. A public project to see which LLM outperforms the market. $150M invested alongside Grok, Chat, & Claude on @joinautopilot
swyx @swyx
163K Followers 4K Following achieve ambition with intentionality, intensity, integrity & insanity. affiliations: - @dxtipshq - @cognition - @temporalio - @aidotengineer - @latentspacepod
Marlene Mhangami @marlene_zw
27K Followers 3K Following Python & AI @github @Microsoft (Core AI)🐍✨ Chair @TheOfficialACM, @ThePSF Fellow. Seeing open futures👁️ ex: @nvidia|@voltrondata|@pyconafrica chair👩🏾💻🌍❤️
Kashyap Murali @katchu11
2K Followers 282 Following a lil bit of this, a lil bit of that eng. MTS @ Anthropic
Joe Tannenbaum @joetannenbaum
5K Followers 704 Following Software engineer @laravelphp Find me elsewhere: https://t.co/vvrBgsHLeeGuido van Rossum @gvanrossum
308K Followers 480 Following Python's BDFL-emeritus, Distinguished Engineer at Microsoft, Computer History Fellow, fully vaccinated. Opinions are my own. He/him.
Bohuslav Šimek @BohuslavSimek
182 Followers 1K Following
Neal @nealio82
1K Followers 2K Following Product-minded software engineer and engineering manager. Conference speaker. Organiser of the @symfonyuk usergroup meet-ups.
mrdanack.bsky.social @MrDanack
979 Followers 797 Following Maintainer of the PHP Imagick extension. Has a gurt beard. He/him. aka https://t.co/n0msPZAUM0
Pascal Baljet @pascalbaljet
7K Followers 427 Following Husband of Esmée, dad of Loïs and Kate ❤️ Works at @laravelphp (Open Source / Inertia). Also builds https://t.co/W2qw05oIp0.
Vlad@Coding Wisely(Ta... @CodingWisely
605 Followers 200 Following Laravel Serbia Organizer. CEO at Taskavel. Builder.
David Hill @iamdavidhill
19K Followers 999 Following Head of Design @opencode and @anomalyco • @terminaldotshop • Prev Head of Design @laravelphp
Adnan Khan @adnanthekhan
4K Followers 253 Following Security Engineer | Part Time Security Researcher | Build Pipeline Menace | All thoughts and opinions are my own | 🍉
Mario Zechner @badlogicgames
52K Followers 1K Following Armin's handler at https://t.co/B05ybKGkzx. Old man yelling at Claudes. https://t.co/Q1wG57v1yc https://t.co/mnOoWUr0TO https://t.co/8i5vIRE0Wn
Peter Steinberger �... @steipete
534K Followers 2K Following Polyagentmorous ClawFather. Came back from retirement to mess with AI and help a lobster take over the world. @OpenClaw🦞 + @OpenAI
Michael Dyrynda @michaeldyrynda
12K Followers 294 Following Dad. @laravelphp Artisan. @LaraconAU organiser. Co-host of @northsouthaudio, @laravelnews, @ripplesfm. Opinions are mine.
Joe Dixon ☁️ @joedixon
5K Followers 595 Following Making it easy to ship apps @laravelphp ☁️ Maintainer @laravelio Aggregating feeds with https://t.co/oasZhCKpQ7
Ashley Rich @A5hleyRich
1K Followers 546 Following Senior Software Engineer @laravelphp working on Forge • Co-founder of https://t.co/Qc4jQYYLu5
Jason McCreary @gonedark
16K Followers 74 Following I’m JMac. I build things with my hands like @laravelshift and my standing desk.
Jack Ellis @JackEllis
32K Followers 182 Following Building https://t.co/ndBSDrT82o since 2019. Fiercely independent and entirely self-funded. Sharing the journey.
Pierre Burgy - Strapi... @pierre_burgy
3K Followers 492 Following Co-founder & CEO @strapijs - The Open-Source Headless CMS 🚀 Open-Source. Remote. Windsurfing.
Andreas Klinger 🦾 @andreasklinger
70K Followers 4K Following Mad-scientist investor main-questing Europe 🇪🇺 @prototype_cap 🦾 @euinc_petition 🇪🇺 🔧-prev: @producthunt @angellist @coinlist @beondeck ❤️ @susanneknoll
Vincent Amstoutz @vinceAmstoutz
119 Followers 238 Following Lead Dev, Speaker & OSS Contributor at @coopTilleuls | Also freelance
Eric L. Barnes @ericlbarnes
29K Followers 736 Following I write about the Laravel PHP framework on @laravelnews 📧 [email protected]
Cheuk Ting Ho @cheukting_ho
3K Followers 1K Following This account is deprecated, find me somewhere else: https://t.co/msCw97IAxx
Liam Hammett @LiamHammett
3K Followers 1K Following 💻 Senior Tech Lead @futureplc 🎥 Making videos at https://t.co/1yfIfx0lGD
John O'Nolan @JohnONolan
38K Followers 662 Following Founder/CEO @Ghost — Geographically restless. Making an RSS reader for some reason @AlcoveNews
Jeroen Gerits @JeroenGerits
1K Followers 2K Following Sparking ideas, creating connections, and making moments that last. Proudly crafting Laracon EU for over a decade
steve.prophet @nilslice
2K Followers 2K Following CEO @dylibso. making AI-driven extensible everything.
Jon Purvis @JonPurvis_
338 Followers 309 Following Engineering Lead. PHP Developer. Eater of Chicken. Gamer of Games. Collector of ElePHPants. Creator of Faker Stripe, Lawman, Profanify and Squeaky.
Will King @willking
3K Followers 972 Following Design Engineer @snowflake (via @crunchydata) — Head Coach @terminaldotshop — Married to the girl of my dreams @littlealison93 — Psalms 118:24
Kasper Hartwich @kasperh
892 Followers 565 Following "The Laravel community is the framework that supports the framework." Developer // Main Organizer @laravellivedk // Chairman of Laravel Denmark
























