A Composer plugin that compares composer.lock files and generates Markdown reports for dependency changes.
Composer Diff is a Composer plugin and standalone tool that analyzes changes between composer.lock files and generates detailed reports in multiple formats. It helps developers track dependency updates, downgrades, and removals to simplify reviewing changes in pull requests and maintain project stability.
PHP developers and teams using Composer for dependency management who need to audit dependency changes, especially in CI/CD pipelines or pull request reviews.
Developers choose Composer Diff for its broad PHP version compatibility (PHP 5.3+), zero external dependencies when used as a plugin, and flexible output formats including Markdown tables, lists, JSON, and GitHub-flavored Markdown. It also offers a dedicated GitHub Action and strict mode for CI integration.
Compares composer.lock changes and generates Markdown report so you can use it in PR description.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports PHP versions from 5.3 to 8.x and both Composer v1/v2 with zero external dependencies as a plugin, ensuring it works in legacy and modern environments alike.
Generates reports in Markdown table, list, JSON, and GitHub-flavored Markdown, allowing integration into pull requests, documentation, or automated pipelines.
Includes strict mode with configurable exit codes (e.g., bit flags for prod/dev changes) and a pre-built GitHub Action, making it easy to enforce dependency policies in workflows.
Accepts composer.lock files from local paths, URLs, or Git references, enabling comparisons across branches, tags, or remote repositories without manual file handling.
Operates solely via command-line, which can be less accessible for users preferring point-and-click tools or visual diff presentations, limiting adoption in some teams.
Only works with PHP projects using Composer, making it irrelevant for ecosystems like Node.js or Python where similar dependency tracking might be needed.
Requires global Composer installation or plugin setup, which adds complexity in shared or containerized environments compared to zero-install web alternatives.