https://github.com/snyk/composer-lockfile-parser

composer parser php snyk

Score: 22.77063278992484

Last synced: 1 day ago
JSON representation

Repository metadata:

Snyk composer.lock file parser

Host: GitHub
URL: https://github.com/snyk/composer-lockfile-parser
Owner: snyk
License: other
Created: 2019-06-06T12:11:49.000Z (over 7 years ago)
Default Branch: master
Last Pushed: 2026-09-11T17:43:34.000Z (about 2 months ago)
Last Synced: 2026-09-30T12:40:30.206Z (about 1 month ago)
Topics: composer, parser, php, snyk
Language: TypeScript
Size: 156 KB
Stars: 9
Watchers: 86
Forks: 5
Open Issues: 0
Metadata Files:
- Readme: README.md
- Contributing: .github/CONTRIBUTING.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS

Owner metadata:

Name: Snyk
Login: snyk
Email:
Kind: organization
Description: Find and automatically fix vulnerabilities in your code, open source dependencies, containers, and infrastructure as code.
Website: https://snyk.io/
Location: London/Israel
Twitter:
Company:
Icon url: https://avatars.githubusercontent.com/u/12959162?v=4
Repositories: 238
Last Synced at: 2026-10-31T11:16:32.541Z
Profile URL: https://github.com/snyk

GitHub Events

Total

Create event: 4
Delete event: 4
Issue comment event: 2
Pull request event: 5
Pull request review event: 1
Push event: 4
Watch event: 2
Total: 22

Last Year

Create event: 1
Delete event: 2
Pull request event: 1
Pull request review event: 1
Push event: 2
Total: 7

Committers metadata

Last synced: 2 days ago

Total Commits: 33
Total Committers: 13
Avg Commits per committer: 2.538
Development Distribution Score (DDS): 0.788

Commits in past year: 7
Committers in past year: 4
Avg Commits per committer in past year: 1.75
Development Distribution Score (DDS) in past year: 0.571

Name	Email	Commits
Wayne Grant	w**t@s**o	7
Chris West (Faux)	g**g@g**m	6
Daniel Kontorovskyi	d**y@g**m	5
Gergő Papp-Szentannai	g**i@s**o	3
gitphill	p**t@s**o	3
bikochan	b****n	2
prodsec-github-automation	1****n	1
cvaidas	c**a@s**o	1
anthogez	a**s@s**o	1
MarcusArdelean	m**n@s**o	1
Liliana Kastilio	l**i@s**o	1
aviadhahami	a**i@s**o	1
Konstantin Yegupov	k**n@s**o	1

Issue and Pull Request metadata

Last synced: 2 days ago

Total issues: 3
Total pull requests: 41
Average time to close issues: over 2 years
Average time to close pull requests: 14 days
Total issue authors: 3
Total pull request authors: 17
Average comments per issue: 2.0
Average comments per pull request: 1.73
Merged pull request: 33
Bot issues: 0
Bot pull requests: 0

Past year issues: 0
Past year pull requests: 7
Past year average time to close issues: N/A
Past year average time to close pull requests: 8 days
Past year issue authors: 0
Past year pull request authors: 4
Past year average comments per issue: 0
Past year average comments per pull request: 1.86
Past year merged pull request: 7
Past year bot issues: 0
Past year bot pull requests: 0

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/snyk/composer-lockfile-parser

Top Issue Authors

mjrider (1)
chocky335 (1)
nutstick (1)

Top Pull Request Authors

wayne-grant (10)
FauxFaux (5)
dkontorovskyy (4)
gergo-papp (3)
gitphill (3)
prodsec-github-automation (2)
bikochan (2)
rbijja (2)
cvaidas (2)
snyk-bot (1)
anthogez (1)
bradenpowers (1)
lili2311 (1)
mj12albert (1)
aviadhahami (1)

Top Issue Labels

Top Pull Request Labels

released (25)
github-governance (4)
github-governance-run-PRODSEC-10215 (2)
github-governance-run-OSM-3115 (2)
secrets-scanning-channel-sca (2)
prodsec-security-md (1)
prodsec-asset-classification (1)
os-managed (1)
force-merge-reason-PRODSEC-10215 (1)
prodsec-orb-runtime-context (1)

Package metadata

Total packages: 1
Total downloads:
- npm: 53,847 last-month
Total docker downloads: 66,158,283
Total dependent packages: 3
Total dependent repositories: 5,459
Total versions: 12
Total maintainers: 1

npmjs.org: @snyk/composer-lockfile-parser

Generate a dep tree given a composer.lock file

Homepage: https://github.com/snyk/composer-lockfile-parser#readme
Licenses: Apache-2.0
Latest release: 1.5.0 (published 4 months ago)
Last Synced: 2026-10-31T16:01:43.462Z (2 days ago)
Versions: 12
Dependent Packages: 3
Dependent Repositories: 5,459
Downloads: 53,847 Last month
Docker Downloads: 66,158,283
Rankings:
- Docker downloads count: 0.189%
- Dependent repos count: 0.318%
- Downloads: 0.609%
- Average: 4.326%
- Dependent packages count: 5.893%
- Forks count: 6.745%
- Stargazers count: 12.205%
Maintainers (1)
- snyk-admin

Dependencies

package.json npm

@types/node 6.14.6 development
@types/node-fetch ^2.5.2 development
lodash.find ^4.6.0 development
node-fetch ^2.6.0 development
tap 12.7.0 development
tslint 5.17.0 development
typescript 3.7.3 development
lodash.findkey ^4.6.0
lodash.get ^4.4.2
lodash.invert ^4.3.0
lodash.isempty ^4.4.0

test/fixtures/circular_deps_php_project/composer.json packagist

ext-dom 20031129
okaufmann/swiss-weather-api ^0.0.6
php ^7.1.3
phpunit/phpunit ^6.4
symfony/debug ~3.4|~4.0
symfony/polyfill-mbstring ^1.6

test/fixtures/circular_deps_php_project/composer.lock packagist

symfony/config dev-master development
symfony/dependency-injection dev-master development
symfony/event-dispatcher dev-master development
symfony/filesystem dev-master development
symfony/lock dev-master development
symfony/process dev-master development
doctrine/inflector dev-master
doctrine/instantiator dev-master
guzzlehttp/guzzle 6.3.0
guzzlehttp/promises dev-master
guzzlehttp/psr7 dev-master
illuminate/contracts dev-master
illuminate/support dev-master
kevinrob/guzzle-cache-middleware v3.1.0
myclabs/deep-copy 1.7.0
nesbot/carbon dev-master
okaufmann/swiss-weather-api 0.0.6
phar-io/manifest dev-master
phar-io/version 1.0.1
php dev-master
phpdocumentor/reflection-common dev-master
phpdocumentor/reflection-docblock 4.1.1
phpdocumentor/type-resolver 0.4.0
phpspec/prophecy dev-master
phpunit/php-code-coverage dev-master
phpunit/php-file-iterator 1.4.x-dev
phpunit/php-text-template 1.2.1
phpunit/php-timer dev-master
phpunit/php-token-stream dev-master
phpunit/phpunit dev-master
phpunit/phpunit-mock-objects dev-master
psr/container dev-master
psr/http-message dev-master
psr/log dev-master
psr/simple-cache dev-master
sebastian/code-unit-reverse-lookup dev-master
sebastian/comparator dev-master
sebastian/diff dev-master
sebastian/environment dev-master
sebastian/exporter dev-master
sebastian/global-state dev-master
sebastian/object-enumerator dev-master
sebastian/object-reflector dev-master
sebastian/recursion-context dev-master
sebastian/resource-operations dev-master
sebastian/version dev-master
spatie/regex 1.2.0
symfony/debug dev-master
symfony/polyfill-mbstring dev-master
symfony/translation 3.4.x-dev
theseer/tokenizer 1.1.0
webmozart/assert dev-master

test/fixtures/circular_deps_special_test/composer.json packagist

ext-dom 20031129
okaufmann/swiss-weather-api ^0.0.6
php ^7.1.3
phpunit/phpunit ^6.4
symfony/debug ~3.4|~4.0
symfony/polyfill-mbstring ^1.6

test/fixtures/circular_deps_special_test/composer.lock packagist

symfony/config dev-master development
symfony/dependency-injection dev-master development
symfony/event-dispatcher dev-master development
symfony/filesystem dev-master development
symfony/lock dev-master development
symfony/process dev-master development
doctrine/inflector dev-master
doctrine/instantiator dev-master
guzzlehttp/guzzle 6.3.0
guzzlehttp/promises dev-master
guzzlehttp/psr7 dev-master
illuminate/contracts dev-master
illuminate/support dev-master
kevinrob/guzzle-cache-middleware v3.1.0
myclabs/deep-copy 1.7.0
nesbot/carbon dev-master
okaufmann/swiss-weather-api 0.0.6
phar-io/manifest dev-master
phar-io/version 1.0.1
phpdocumentor/reflection-common dev-master
phpdocumentor/reflection-docblock 4.1.1
phpdocumentor/type-resolver 0.4.0
phpspec/prophecy dev-master
phpunit/php-code-coverage dev-master
phpunit/php-file-iterator 1.4.x-dev
phpunit/php-text-template 1.2.1
phpunit/php-timer dev-master
phpunit/php-token-stream dev-master
phpunit/phpunit dev-master
phpunit/phpunit-mock-objects dev-master
psr/container dev-master
psr/http-message dev-master
psr/log dev-master
psr/simple-cache dev-master
sebastian/code-unit-reverse-lookup dev-master
sebastian/comparator dev-master
sebastian/diff dev-master
sebastian/environment dev-master
sebastian/exporter dev-master
sebastian/global-state dev-master
sebastian/object-enumerator dev-master
sebastian/object-reflector dev-master
sebastian/recursion-context dev-master
sebastian/resource-operations dev-master
sebastian/version dev-master
spatie/regex 1.2.0
symfony/debug dev-master
symfony/polyfill-mbstring dev-master
symfony/translation 3.4.x-dev
theseer/tokenizer 1.1.0
webmozart/assert dev-master

test/fixtures/interdependent_modules/composer.json packagist

m1 1.0.0
m10 1.0.0
m2 1.0.0
m3 1.0.0
m4 1.0.0
m5 1.0.0
m6 1.0.0
m7 1.0.0
m8 1.0.0
m9 1.0.0
php ~7.1.3||~7.2.0

test/fixtures/interdependent_modules/composer.lock packagist

m1 1.0.0
m10 1.0.0
m2 1.0.0
m3 1.0.0
m4 1.0.0
m5 1.0.0
m6 1.0.0
m7 1.0.0
m8 1.0.0
m9 1.0.0

test/fixtures/lockfile-invalid-json/composer.json packagist

php >=5.3.2

test/fixtures/lockfile_with_no_name_dep/composer.json packagist

phpunit/phpunit ^8.4 development
php ^7.3
psr/log ^1.1

test/fixtures/lockfile_with_no_name_dep/composer.lock packagist

doctrine/instantiator 1.2.0 development
myclabs/deep-copy 1.9.3 development
phar-io/manifest 1.0.3 development
phar-io/version 2.0.1 development
phpdocumentor/reflection-common 2.0.0 development
phpdocumentor/reflection-docblock 4.3.2 development
phpdocumentor/type-resolver 1.0.1 development
phpspec/prophecy 1.9.0 development
phpunit/php-code-coverage 7.0.8 development
phpunit/php-file-iterator 2.0.2 development
phpunit/php-text-template 1.2.1 development
phpunit/php-timer 2.1.2 development
phpunit/php-token-stream 3.1.1 development
phpunit/phpunit 8.4.1 development
sebastian/code-unit-reverse-lookup 1.0.1 development
sebastian/comparator 3.0.2 development
sebastian/diff 3.0.2 development
sebastian/environment 4.2.2 development
sebastian/exporter 3.1.2 development
sebastian/global-state 3.0.0 development
sebastian/object-enumerator 3.0.3 development
sebastian/object-reflector 1.1.1 development
sebastian/recursion-context 3.0.0 development
sebastian/resource-operations 2.0.1 development
sebastian/type 1.1.3 development
sebastian/version 2.0.1 development
symfony/polyfill-ctype v1.12.0 development
theseer/tokenizer 1.1.3 development
webmozart/assert 1.5.0 development

test/fixtures/many_deps_php_project/composer.json packagist

psr/log ~1.0 development
symfony/config ~3.4|~4.0 development
symfony/dependency-injection ~3.4|~4.0 development
symfony/event-dispatcher ~3.4|~4.0 development
symfony/lock ~3.4|~4.0 development
symfony/process ~3.4|~4.0 development
ext-dom 20031129
okaufmann/swiss-weather-api ^0.0.6
php ^7.1.3
phpunit/phpunit ^6.4
symfony/debug ~3.4|~4.0
symfony/polyfill-mbstring ^1.6

test/fixtures/many_deps_php_project/composer.lock packagist

symfony/config dev-master development
symfony/dependency-injection dev-master development
symfony/event-dispatcher dev-master development
symfony/filesystem dev-master development
symfony/lock dev-master development
symfony/process dev-master development
doctrine/inflector dev-master
doctrine/instantiator dev-master
guzzlehttp/guzzle 6.3.0
guzzlehttp/promises dev-master
guzzlehttp/psr7 dev-master
illuminate/contracts dev-master
illuminate/support dev-master
kevinrob/guzzle-cache-middleware v3.1.0
myclabs/deep-copy 1.7.0
nesbot/carbon dev-master
okaufmann/swiss-weather-api 0.0.6
phar-io/manifest dev-master
phar-io/version 1.0.1
phpdocumentor/reflection-common dev-master
phpdocumentor/reflection-docblock 4.1.1
phpdocumentor/type-resolver 0.4.0
phpspec/prophecy dev-master
phpunit/php-code-coverage dev-master
phpunit/php-file-iterator 1.4.x-dev
phpunit/php-text-template 1.2.1
phpunit/php-timer dev-master
phpunit/php-token-stream dev-master
phpunit/phpunit dev-master
phpunit/phpunit-mock-objects dev-master
psr/container dev-master
psr/http-message dev-master
psr/log dev-master
psr/simple-cache dev-master
sebastian/code-unit-reverse-lookup dev-master
sebastian/comparator dev-master
sebastian/diff dev-master
sebastian/environment dev-master
sebastian/exporter dev-master
sebastian/global-state dev-master
sebastian/object-enumerator dev-master
sebastian/object-reflector dev-master
sebastian/recursion-context dev-master
sebastian/resource-operations dev-master
sebastian/version dev-master
spatie/regex 1.2.0
symfony/debug dev-master
symfony/polyfill-mbstring dev-master
symfony/translation 3.4.x-dev
theseer/tokenizer 1.1.0
webmozart/assert dev-master

test/fixtures/missing_compose_json/composer.lock packagist

symfony/config dev-master development
symfony/dependency-injection dev-master development
symfony/event-dispatcher dev-master development
symfony/filesystem dev-master development
symfony/lock dev-master development
symfony/process dev-master development
doctrine/inflector dev-master
doctrine/instantiator dev-master
guzzlehttp/guzzle 6.3.0
guzzlehttp/promises dev-master
guzzlehttp/psr7 dev-master
illuminate/contracts dev-master
illuminate/support dev-master
kevinrob/guzzle-cache-middleware v3.1.0
myclabs/deep-copy 1.7.0
nesbot/carbon dev-master
okaufmann/swiss-weather-api 0.0.6
phar-io/manifest dev-master
phar-io/version 1.0.1
phpdocumentor/reflection-common dev-master
phpdocumentor/reflection-docblock 4.1.1
phpdocumentor/type-resolver 0.4.0
phpspec/prophecy dev-master
phpunit/php-code-coverage dev-master
phpunit/php-file-iterator 1.4.x-dev
phpunit/php-text-template 1.2.1
phpunit/php-timer dev-master
phpunit/php-token-stream dev-master
phpunit/phpunit dev-master
phpunit/phpunit-mock-objects dev-master
psr/container dev-master
psr/http-message dev-master
psr/log dev-master
psr/simple-cache dev-master
sebastian/code-unit-reverse-lookup dev-master
sebastian/comparator dev-master
sebastian/diff dev-master
sebastian/environment dev-master
sebastian/exporter dev-master
sebastian/global-state dev-master
sebastian/object-enumerator dev-master
sebastian/object-reflector dev-master
sebastian/recursion-context dev-master
sebastian/resource-operations dev-master
sebastian/version dev-master
spatie/regex 1.2.0
symfony/debug dev-master
symfony/polyfill-mbstring dev-master
symfony/translation 3.4.x-dev
theseer/tokenizer 1.1.0
webmozart/assert dev-master

test/fixtures/missing_package_prop/composer.json packagist

php >=5.3.2

test/fixtures/no_branch_alias/composer.json packagist

josantonius/router ^1.0.9
php >=5.5.9

test/fixtures/no_branch_alias/composer.lock packagist

josantonius/router 1.0.9
josantonius/url 1.1.8

test/fixtures/no_project_name/composer.json packagist

php >=5.3.2

test/fixtures/proj_with_aliases/composer.json packagist

php >=5.3.2
symfony/monolog-bridge 2.6 as 2.7
symfony/monolog-bundle ^3.1

test/fixtures/proj_with_aliases/composer.lock packagist

monolog/monolog 1.23.0
psr/container 1.0.0
psr/log 1.0.2
symfony/config v3.3.13
symfony/debug v3.3.13
symfony/dependency-injection v3.3.13
symfony/event-dispatcher v3.3.13
symfony/filesystem v3.3.13
symfony/http-foundation v3.3.13
symfony/http-kernel v3.3.13
symfony/monolog-bridge v2.6.0
symfony/monolog-bundle v3.1.2
symfony/polyfill-mbstring v1.6.0

test/fixtures/proj_with_aliases_external_github/composer.json packagist

php >=5.3.2
symfony/monolog-bridge dev-my-bugfix as 2.7
symfony/monolog-bundle ^3.1

test/fixtures/proj_with_aliases_external_github/composer.lock packagist

monolog/monolog 1.23.0
psr/container 1.0.0
psr/log 1.0.2
symfony/config v3.3.13
symfony/debug v3.3.13
symfony/dependency-injection v3.3.13
symfony/event-dispatcher v3.3.13
symfony/filesystem v3.3.13
symfony/http-foundation v3.3.13
symfony/http-kernel v3.3.13
symfony/monolog-bridge dev-my-bugfix
symfony/monolog-bundle v3.1.2
symfony/polyfill-mbstring v1.6.0

test/fixtures/proj_with_dev_deps/composer.json packagist

phpunit/phpunit ^8.4 development
php ^7.3

test/fixtures/proj_with_dev_deps/composer.lock packagist

doctrine/instantiator 1.2.0 development
myclabs/deep-copy 1.9.3 development
phar-io/manifest 1.0.3 development
phar-io/version 2.0.1 development
phpdocumentor/reflection-common 2.0.0 development
phpdocumentor/reflection-docblock 4.3.2 development
phpdocumentor/type-resolver 1.0.1 development
phpspec/prophecy 1.9.0 development
phpunit/php-code-coverage 7.0.8 development
phpunit/php-file-iterator 2.0.2 development
phpunit/php-text-template 1.2.1 development
phpunit/php-timer 2.1.2 development
phpunit/php-token-stream 3.1.1 development
phpunit/phpunit 8.4.1 development
sebastian/code-unit-reverse-lookup 1.0.1 development
sebastian/comparator 3.0.2 development
sebastian/diff 3.0.2 development
sebastian/environment 4.2.2 development
sebastian/exporter 3.1.2 development
sebastian/global-state 3.0.0 development
sebastian/object-enumerator 3.0.3 development
sebastian/object-reflector 1.1.1 development
sebastian/recursion-context 3.0.0 development
sebastian/resource-operations 2.0.1 development
sebastian/type 1.1.3 development
sebastian/version 2.0.1 development
symfony/polyfill-ctype v1.12.0 development
theseer/tokenizer 1.1.3 development
webmozart/assert 1.5.0 development

test/fixtures/proj_with_no_deps/composer.json packagist

php >=5.3.2

test/fixtures/vulnerable_project/composer.json packagist

aws/aws-sdk-php 3.0.0
doctrine/common 2.5.0
php >=5.3.2
symfony/symfony v2.3.1
yiisoft/yii 1.1.14
zendframework/zendframework 2.1.0

test/fixtures/vulnerable_project/composer.lock packagist

aws/aws-sdk-php 3.0.0
doctrine/annotations v1.5.0
doctrine/cache v1.7.1
doctrine/collections v1.5.0
doctrine/common v2.5.0
doctrine/inflector v1.2.0
doctrine/lexer v1.0.1
guzzlehttp/guzzle 6.3.0
guzzlehttp/promises v1.3.1
guzzlehttp/psr7 1.4.2
mtdowling/jmespath.php 2.4.0
psr/http-message 1.0.1
psr/log 1.0.2
symfony/icu v1.2.2
symfony/symfony v2.3.1
twig/twig v1.35.0
yiisoft/yii 1.1.14
zendframework/zendframework 2.1.0

test/fixtures/composer-invalid-json/composer.json packagist

test/fixtures/composer-invalid-json/composer.lock packagist

test/fixtures/lockfile-invalid-json/composer.lock packagist

test/fixtures/missing_package_prop/composer.lock packagist

test/fixtures/no_project_name/composer.lock packagist

test/fixtures/proj_with_no_deps/composer.lock packagist

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Summary