#php-dependency-management

Commit composer.lock and Use composer install for Deterministic PHP Builds

Lock the dependency resolution with composer.lock and install exactly those versions. Use composer install, not update, in CI and production for deterministic PHP builds.

Community & Careers · Blog

deterministic-buildscomposer-lockcomposer