Dependency Management

AI agents add dependencies without understanding the consequences. Supply chain attacks on Open Source packages are on the rise. And updates keep getting postponed until nothing fits together any more. If you do not actively manage your dependencies, you lose control over your own software.

In this training, you will learn how to professionally manage dependencies in PHP projects. We cover advanced Composer usage, safe update strategies, and how to protect your software supply chain. You will get the tools and practices to keep your dependencies under control for good.

• Understand Semantic Versioning and use version constraints in Composer effectively
• Configure Composer for real-world projects: repositories, platform requirements, autoloading
• Supply chain security: audit dependencies and minimise risk
• Update strategies: keep dependencies current without jeopardising stability
• Use CI to verify updates automatically instead of deploying on hope
• Decouple your own code from dependencies using clean code principles

• PHP developers who use Composer but are unsure about configuration and version constraints
• Teams that keep postponing updates because they fear breaking changes
• Developers who take supply chain risks seriously and want to secure their software supply chain
• Teams where AI agents add dependencies without anyone reviewing the consequences

You should have several months of experience programming in PHP or a similar programming language. Basic Composer knowledge (require, install, update) is helpful but not required.

• Configure Composer specifically for your project's needs
• Set version constraints deliberately instead of copying them from Stack Overflow
• Keep dependencies up to date without risking your project's stability
• Identify and minimise risks in your software supply chain
• Decouple your code from dependencies so that updates do not trigger a chain reaction