Conversation

Notices

1. Embed this notice
   packagist (packagist@phpc.social)'s status on Tuesday, 23-Sep-2025 23:01:00 JST packagist

   Together with PyPI, Maven Central, crates.io and other major package registries we signed a statement on sustainable open source infrastructure.

   3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs.

   Our Blog: https://blog.packagist.com/a-call-for-sustainable-open-source-infrastructure/
   Open Letter: https://openssf.org/blog/2025/09/23/open-infrastructure-is-not-free-a-joint-statement-on-sustainable-stewardship/

   #phpc #php #supplychainsecurity #opensourcesustainability

   • Embed this notice
     SuperDicq (superdicq@minidisc.tokyo)'s status on Friday, 26-Sep-2025 21:12:38 JST SuperDicq

     in reply to

     @packagist@phpc.social And this is why repositories for programming languages will always suck.