Packagist and Composer security with Jordi Boggiano
About this episode
Josh interviews Jordi Boggiano about the recent security features added to Composer and Packagist.
Josh welcomes Jordi Boggiano the lead maintainer of Composer and Packagist to explain the truckload of security features they've recently added. Packagist is the PHP package registry, Composer is the dependency manager for PHP. Recently the people behind these projects have added a number of security features that will improve the security of the entire ecosystem. Jordi explains it all to us and gives a glimpse of what's coming next. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-06-packagist-security-jordi
More episodes of Open Source Security
- Abandoned open source with Josh Marpet
- Red Hat's Project Lightwell with Mo Duffy
- Rust Foundation Maintainers Fund with Lori and Niko
- AIBOM, CBOM, and HBOM with Allan Friedman
- Sustaining Open VSX with Mike and Thabang
- Hacking your CI/CD with François Proulx
Explore listener stats, chart rankings, contacts and more on the Open Source Security podcast page.