packagist logo

In the field guide

packagist

packagist.com

Private Packagist is a Composer package archive service for PHP that provides a private repository for managing and securing PHP dependencies. It mirrors packages from various sources, enforces security policies, blocks malware, and offers monitoring and access control features.

The product, beyond the pitch

Automatically researched · Not editorially reviewed · Sources checked Sep 16, 2026

Compare

A good fit for

Not confirmed yet.

Know the limitations

  • Requires running composer update once to regenerate composer.lock for Private Packagist downloads to work properly.

What you can do

Not confirmed yet.

Features

  • Manages and browses private Composer packages through a web interface with a single repository line in composer.json.
  • Mirrors and caches packages from Packagist.org, GitHub, Bitbucket, and other sources to ensure reliable deployments even when upstream servers are down.
  • Monitors security vulnerabilities and sends alerts via email, Slack, Microsoft Teams, or webhook.
  • Provides Update Review comments on pull requests summarizing composer.lock changes linked to diffs and changelogs.
  • Tracks package usage to identify which applications use a package for impact analysis when security advisories occur.

Integrations

Not confirmed yet.

Platforms & data export

Not confirmed yet.

packagist pricing

No plans recorded yet.

THE COST FOR YOUR TEAM

Go beyond the starting price.

Published plan prices for your team size and usage. Results update as you type. Taxes, currency conversion and unlisted add-ons are excluded, and anything the source did not state is called out rather than guessed.

Known monthly subtotal

$0/month

1 of 1 tools could not be priced with these inputs, so this is not the full cost.

Plan costs based on your requirements
Tool / planMonthlyPer yearWhat this assumes
packagist logopackagistNo pricing recorded yet. Check the official site, or ask the owner to add it.

A practical workflow

  1. Configure Private Packagist repository in composer.json replacing other repositories, then require packages by name as usual.
  2. Run composer update at least once to regenerate composer.lock so composer install downloads files from Private Packagist.

Based on the sources below. Editorial review does not imply hands-on product testing.

Alternatives to explore

Filter alternatives →

Candidates based on category and primary feature. Check feature and pricing differences before switching.

Plan a switch from packagist →

What changed

No changes recorded yet

Changes to the facts recorded here, not a live scan of every vendor update. Save this tool to follow updates in your account.

No changes recorded yet.

Comments

No comments yet. Be the first to say what packagist costs you.

Sources & research

How we research, calculate costs, and distinguish sponsorship