liberusoftware/composer-installer

Deterministic Composer 2 installer for tracked Liberu modules and themes.

1.1.0 2026-08-05 07:59 UTC

Requires

• php: ^8.5
• composer-plugin-api: ^2.6

Requires (Dev)

• composer/composer: ^2.6
• laravel/pint: ^1.14
• pestphp/pest: ^5.0

MIT

Published on Packagist.org on 2026-08-05 08:04 UTC

README

Deterministic Composer 2 installer for tracked Liberu modules and themes.

Software · Hosting · Services · Liberu Group

Scope

Deterministic Composer 2 installer for tracked Liberu modules and themes. This package is independently versioned and has no application-specific dependency.

Requirements and installation

Dependency	Supported version
php	^8.5
composer-plugin-api	^2.6

composer require liberusoftware/composer-installer

Public surface

• src/LiberuInstaller.php
• src/Plugin.php

Consumers should depend only on these public types and Composer metadata. Semantic-versioning rules apply to changes in their signatures or behaviour.

Testing

composer update
vendor/bin/pint --test
vendor/bin/pest

The suite runs standalone — it needs no host checkout, only composer/composer as a dev dependency. It covers path computation, the supported package types, name validation, traversal and absolute-path rejection, and collision detection against both the current Composer run and the working tree.

This package gates every install in the fleet, so a regression here breaks every module and theme at once. The installer must retain deterministic, traversal-safe install/update/remove behaviour.

Security

Do not report vulnerabilities through public issues. Email [e-mail] with reproduction details and the affected version.

License

This package is open-source software under the MIT License. The linked licence text is authoritative.

Feedback and contributing

Focused issues and tested pull requests are welcome in the GitHub repository. Update tests, documentation, and CHANGELOG.md for user-visible changes.

Contributors

Thank you to everyone who helps improve Liberu. View the contributors graph.