🧰 Packagist.org

The items that name it 2

• Packagist is now protected by Aikido Intel and other updates to the PHP registry
  article2026-06-26

  PHP package registry; implemented stable version immutability and other security changes

• Socket: Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
  advisory2026-05-13

  public registry; not affected, as it does not use a GitHub App and does not run Composer against GitHub App installation tokens