Blog20.5K views2,223 votes0 replies3,931 following
Commit composer.lock and Use composer install for Deterministic PHP Builds
Lock the dependency resolution with composer.lock and install exactly those versions. Use composer install, not update, in CI and production for deterministic PHP builds.