Packagist
Claim this toolFast, reliable, and secure Composer dependency installation for PHP packages.
From €54.08/mo, free trialVisit WebsiteReviews on G2
14 reviews trackedThe Bottom Line
- Price
- From €54.08/mo, free trial. Compare plans
Key facts
- Manages private and public PHP Composer packages securely.
- Mirrors and caches dependencies for faster, more reliable deployments.
- Monitors for security vulnerabilities in all project dependencies.
Pros
- Ensures fast and reliable Composer dependency installation
- Eliminates single points of failure for package installations by mirroring dependencies
- Provides early warnings for security vulnerabilities in dependencies
- Simplifies Composer configuration by centralizing all repositories
- Offers fine-grained control over package access and dependency addition policies
Cons
- Requires initial setup and configuration of credentials for VCS services
- Composer's lock file needs to be regenerated after initial setup to utilize Private Packagist download URLs
What is Packagist?
Private Packagist provides a private Composer repository for PHP packages, ensuring fast, reliable, and secure dependency installation. It allows organizations to manage and browse all their private packages through a web interface, simplifying Composer project configuration with a single, consistent repository URL. The platform mirrors and caches packages from public sources like Packagist.org, GitHub, and Bitbucket, creating a redundant and highly available infrastructure that prevents deployment failures and ensures developer productivity.
Beyond private package management, Private Packagist offers robust security vulnerability monitoring, alerting users via email, Slack, Microsoft Teams, or webhooks when issues are reported in their third-party or open-source dependencies. It integrates seamlessly with GitHub, Bitbucket, and GitLab for automatic synchronization of teams and repositories, providing granular access control. Built by the creators of Composer, Private Packagist also contributes to the ongoing development of the open-source Composer project.
Available on: Web
Louis Corneloup Source packagist.com ↗
Ratings Across the Web
4.8 (14 reviews)
Packagist holds an aggregate rating of 4.8 out of 5 from 14 reviews across G2, last checked September 13, 2026.
Ratings aggregated from independent review platforms. Learn more
Key Features
- Private Composer package hosting
- Mirroring and caching of open-source and third-party dependencies
- Security vulnerability monitoring and alerts
- Integration with GitHub, Bitbucket, and GitLab for team and repository synchronization
- Granular access control for packages and users
- Support for multiple composer.json files within a single VCS repository
- Instant updates for package metadata via webhooks
- Support for Git, Mercurial, and Subversion repositories
Pricing Plans
Free TrialPricing checked Oct 3, 2026
| Plan | Price | Details |
|---|---|---|
| Private Packagist Cloud | Starts at €59/mo |
+7 more Show less
|
| Cloud (Yearly) | €649 / year |
+20 more Show less
|
Is Packagist worth the price?
Good value
Packagist's pricing, starting at €59/month for the Cloud tier, seems fair for businesses heavily reliant on PHP dependency management.
The yearly Cloud plan at €649/year (effectively €54.08/month) offers a decent discount. It's best for development teams and agencies needing robust private package management and security features.
Reviews
$99 Free with your review
Write a reviewReview Packagist, get a free AI guide
Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.
4.8/5
Across 14 verified user reviews on G2
Add your hands-on experience using the offer above to help the next buyer.
Best Packagist Alternatives
Top alternatives based on features, pricing, and user needs.
Still deciding?
Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.
Explore More
Packagist FAQ
How does Private Packagist enhance the security of PHP projects?
Private Packagist provides early warnings for security vulnerabilities detected in third-party or open-source dependencies. It alerts users via email, Slack, Microsoft Teams, or webhooks when new issues are reported, helping teams address potential risks proactively.
Which teams benefit most from using Private Packagist?
Teams that develop PHP applications requiring secure, reliable, and efficient management of private and public Composer dependencies will find Private Packagist most beneficial. It is particularly useful for organizations needing granular access control and streamlined CI/CD pipelines.
How does Private Packagist compare to Composer directly?
Private Packagist extends Composer by providing a private repository for PHP packages, whereas Composer is the dependency manager itself. Private Packagist simplifies Composer project configuration with a single repository URL and mirrors public packages to ensure reliability and security, which Composer alone does not inherently provide.
What kind of setup is required to integrate Private Packagist into an existing workflow?
Integrating Private Packagist requires an initial setup and configuration of credentials for Version Control System (VCS) services like GitHub, Bitbucket, or GitLab. Additionally, Composer's lock file needs to be regenerated after the initial setup to ensure it utilizes Private Packagist download URLs.
Does Private Packagist support integration with common development tools?
Yes, Private Packagist integrates seamlessly with GitHub, Bitbucket, and GitLab for automatic synchronization of teams and repositories. It also sends security vulnerability alerts to platforms like Slack and Microsoft Teams, or via webhooks.
How is Private Packagist priced?
Private Packagist is a paid product and does not offer a permanently free tier. Its pricing model is designed for organizations that require robust private package management and security features.
Source: packagist.com