@AlphaOmegaOSS is funding Artifact Integrity for Packagist and Composer 🔐
Packagist will store immutable artifacts with checksums, Sigstore signatures and build provenance attestations for Composer to verify.
blog.packagist.com/artifact-integ…
#php #phpc #composerphp #supplychain
Packagist
@packagist
PHP Package Repo for #ComposerPHP getcomposer.org - packagist.org open source - packagist.com private packages. @[email protected]