Packagist

Free plan APIWeb

What Packagist is

Packagist is the default Composer package repository for PHP developers managing project or library dependencies. It collects public PHP packages, helps users find them and tells Composer where to retrieve their code. To publish a package, users submit its public repository URL; Packagist checks that repository periodically. New versions are drawn from repository tags, while branches appear as development versions. GitHub, Bitbucket, GitLab and Gitea hooks or webhooks can support automatic updates. The API offers package search, listings, package information and download statistics, among other operations. Many endpoints can be used anonymously; authenticated endpoints accept bearer tokens or username and API token parameters. Packagist.org is free for publishing open-source PHP packages. The maker says stable versions on the service cannot be silently replaced with different code. The service is intended for public packages, and users who need private-code sharing are directed to Private Packagist. Packagist Conductors GmbH, registered in Berlin, says it has operated the service since its creation in 2012.

Who it suits

Packagist suits PHP developers who use Composer to manage project or library dependencies. It is intended for public packages, not sharing private code.

What it does well

Free to publish open-source PHP packages.
Repository tags supply new package versions.
Supports update hooks from four named platforms.
API includes search and download statistics.
Stable versions cannot be silently replaced, according to the maker.

What to know first

Packagist.org is for public packages only.
Community-run mirrors may be outdated, broken or insecure.

Limits

The Packagist.org plan is free to publish open-source PHP packages. Packagist.org is for public packages; private-code sharing is directed to Private Packagist.

Plans

Plan	Billed and limits	Price
Packagist.org	Free to publish open source PHP packages	Free
Bronze sponsorship	Annual commitment · Sponsor page logos · Social media welcome post · Annual thank-you blog post · Composer GitHub README logo · 10% Private Packagist discount	€2,500 a month
Silver sponsorship	Annual commitment · Bronze benefits · Shared Slack channel · Priority issue/bug response on GitHub · 15% Private Packagist discount	€5,000 a month
Gold sponsorship	Annual commitment · Silver benefits · Packagist.org footer logo · 20% Private Packagist discount	€8,000 a month

As packagist.org lists them, read 4 Oct 2026. The maker's own page has the final word.

Getting started

Visit https://packagist.org/.
Submit the public repository URL for the package you want to publish.
Connect a supported repository hook or webhook for automatic updates, if applicable.
Use Composer to install public packages from the repository.

Verdict

Packagist provides a public package source and update workflow for Composer users. Developers needing to share private code are directed to Private Packagist instead.

Questions

Is Packagist free?

The Packagist.org plan is free to publish open-source PHP packages. Sponsorship plans are also listed, starting at €2,500 a month with an annual commitment.

Can I publish private packages?

Packagist.org is for public packages. The maker directs users who need to share private code to Private Packagist.

Which platforms does Packagist support?

The listed platforms are API and web.

Which repository integrations support automatic updates?

Automatic updates are supported through GitHub, Bitbucket, GitLab, and Gitea hooks or webhooks.

Who makes Packagist?

Packagist Conductors GmbH is registered in Berlin, Germany, and says it has operated Packagist.org since its creation in 2012.

Facts from Packagist's own pages

API authentication: Many API endpoints are anonymous, while authenticated endpoints accept bearer tokens or username and API token parameters. · packagist.org, 4 Oct 2026
Founded: 2012 · packagist.org, 28 Sept 2026
Headquarters: Berlin, Germany · packagist.org, 28 Sept 2026
Maker: Packagist Conductors GmbH is registered in Berlin, Germany, and the company says it has operated Packagist.org since its creation in 2012. · packagist.com, 4 Oct 2026
Mirror security: Packagist warns that community-run mirrors are unaffiliated and may be outdated, broken, or insecure. · packagist.org, 4 Oct 2026
Package publishing: Users publish a package by submitting its public repository URL, after which Packagist periodically crawls it. · packagist.org, 4 Oct 2026
Private code limit: Packagist.org is for public packages; the maker directs users who need to share private code to Private Packagist. · packagist.org, 4 Oct 2026
Public packages: Packagist aggregates public PHP packages that anyone can install with Composer. · packagist.org, 4 Oct 2026
Purpose: Packagist is the default Composer package repository, helping users find packages and telling Composer where to get their code. · packagist.org, 4 Oct 2026
Search API: The API supports package search, package listings, package data and download statistics, among other operations. · packagist.org, 4 Oct 2026
Security: The site says Packagist.org package metadata is hosted on Bunny.net's global CDN. · packagist.org, 4 Oct 2026
Stable version integrity: The maker states that stable Packagist.org versions are immutable and cannot be silently replaced with different code. · packagist.com, 4 Oct 2026
Support: Commercial support and consulting for PHP dependency management with Packagist and Composer are available through Private Packagist subscription plans. · packagist.org, 4 Oct 2026
Update integrations: Automatic package updates are supported through GitHub, Bitbucket, GitLab, and Gitea hooks or webhooks. · packagist.org, 4 Oct 2026
Version updates: New package versions are fetched from repository tags, and branches appear as dev versions. · packagist.org, 4 Oct 2026
Who it serves: Packagist serves PHP developers who use Composer to manage project or library dependencies. · packagist.org, 4 Oct 2026

Where Packagist stands on Freedom251

Package Registries#21 of 28