A fast, zero-configuration application bundler for creating PHAR (PHP Archive) files.
Box is a fast, zero-configuration application bundler specifically designed for creating PHAR (PHP Archive) files. It solves the problem of packaging PHP applications into single, executable archives for easy distribution and deployment. The tool automates the bundling process with features like code isolation, requirement checking, and security signing.
PHP developers and DevOps engineers who need to distribute CLI tools, libraries, or applications as standalone executables. It's particularly useful for open-source project maintainers and teams deploying internal tools.
Developers choose Box for its balance of simplicity and power—it works with zero configuration yet offers advanced features like PHAR isolation, Docker support, and security signing. Its speed and comprehensive tooling (info, diff, verify commands) make it a superior alternative to manual PHAR creation or older bundlers.
📦🚀 Fast, zero config application bundler with PHARs.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Box works with sensible defaults out of the box, enabling PHAR creation via 'box compile' without any initial setup, as stated in the Key Features and Usage sections.
It isolates code within the PHAR using features like PHP-Scoper compaction to prevent conflicts with the host environment, detailed in the PHAR code isolation documentation.
Includes a requirements checker for PHP version validation and supports GPG signing for integrity verification, as highlighted in the Security Signing and Requirements Checker features.
Offers dedicated Docker commands for building PHARs and automatically uses Git tags for versioning, streamlining deployment and CI/CD workflows, per the Docker Support and Git Integration sections.
While zero-config for basics, advanced features like reproducible builds or PHP-Scoper integration require intricate configuration, which can be daunting, as hinted in the Reproducible Builds documentation.
Full functionality, such as GPG signing, relies on external tools and key management, adding setup complexity and potential points of failure, as noted in the PHAR signing best practices.
The upgrade guide from Box2 indicates significant changes between major versions, which could disrupt existing builds and require migration efforts, as mentioned in the README's upgrade note.