2.2 LTS and the way forward

Composer's 2.2 release is a LTS (Long Term Support) version. We will provide bugfixes for critical bugs and security issues until at least end of 2023, and will reassess then according to the usage we see.

The reason we did this is that after over 10 years stuck with a PHP 5.3 requirement, Composer 2.3 increased the required PHP version to >=7.2.5 and thus stop supporting PHP 5.3.2 - 7.2.4.

Composer 2.2 supports PHP versions 5.3.2 to 8.1.x (but not above, if you need higher upgrade to the latest Composer 2.x).

According to our usage metrics this should (at the time of release) leave a bit less than 10% of users stuck on the Composer 2.2 LTS until they can upgrade their PHP version. With PHP 7.1 being EOL for about 2 years already it is anyway about time everyone using 7.1 or below would upgrade.

1.x Deprecation

About 1/3rd of composer installs are still run with Composer 1.x. We are committed to keep the v1 repository format working in its currently reduced capacity until at least end of 2022, but afterwards we will probably turn it into a read-only snapshot that will not receive updates anymore.

If you are still using Composer 1 I would really urge you to upgrade to Composer 2. If something is blocking you from doing so please do get in touch if you think we can help.

Update: As per the announcement Composer 1 support on Packagist.org will become readonly from February 1st, 2025 and then fully dropped on August 1st, 2025.