Episode

Packagist and Composer security with Jordi Boggiano

Podcast: Open Source Security
Published: Jun 22, 2026
Duration seconds: 2088
Processing state: not_requested
Canonical source: https://opensourcesecuritypodcast.libsyn.com/packagist-and-composer-security-with-jordi-boggiano
Audio: https://traffic.libsyn.com/secure/opensourcesecuritypodcast/2026-06-packagist-security-jordi.mp3?dest-id=542864
JSON: /v1/public/podcasts/open-source-security-518991/episodes/packagist-and-composer-security-with-jordi-boggiano
Markdown: /podcast/open-source-security-518991/packagist-and-composer-security-with-jordi-boggiano.md

Actions

POST https://stenobird.com/v1/public/podcasts/open-source-security-518991/episodes/packagist-and-composer-security-with-jordi-boggiano/transcription-requests
Idempotently request low-priority transcript generation for this episode.
GET https://stenobird.com/podcast/open-source-security-518991/packagist-and-composer-security-with-jordi-boggiano.md
Read the agent-friendly Markdown representation of this episode resource.

Summary

Josh welcomes Jordi Boggiano the lead maintainer of Composer and Packagist to explain the truckload of security features they've recently added. Packagist is the PHP package registry, Composer is the dependency manager for PHP. Recently the people behind these projects have added a number of security features that will improve the security of the entire ecosystem. Jordi explains it all to us and gives a glimpse of what's coming next. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-06-packagist-security-jordi