How to set up GitLab Composer repository for my organization?

Clone the repository, run composer install, copy and configure gitlab.ini, ensure the cache is writable, and set up a web server alias for packages.php. Follow the installation steps in the README for detailed guidance.

GitLab Composer repository vs Satis: which should I use for private packages?

GitLab Composer is simpler and automates scanning within GitLab, but Satis offers better security for the package list and more control over package inclusion. Choose based on your need for automation versus enhanced access control.

Can I use GitLab Composer with multiple GitLab instances or self-hosted setups?

The script is designed for a single GitLab installation, scanning all projects within it. For multiple instances, you might need to run separate installations or customize the configuration, which isn't natively supported.

How to allow package names that don't match project paths in GitLab Composer?

Enable the 'allow_package_name_mismatch' setting in the gitlab.ini configuration file. This overrides the default validation and prevents errors from copied composer.json files, as mentioned in the usage section.

Is the package list secure in GitLab Composer, or can it be accessed publicly?

No, the package index is publicly accessible by default. While GitLab projects are protected via SSH, the list itself is exposed, which is a security caveat highlighted in the README. Consider additional measures if privacy is critical.

How to cache packages and improve performance in GitLab Composer?

Configure the cache directory to be writable and adjust the TTL setting in gitlab.ini to control refresh intervals. The default TTL is 60 seconds, but increasing it can reduce server load for larger installations.

Open-Awesome

Categories Alternatives Stacks Self-Hosted Explore

Open-Awesome

Terms Privacy About GitHub RSS

GitLab-Composer — GitLab Composer Repository Indexer | Open Awesome

GitLab-Composer

GitLab-Composer

PHP2.0

A GitLab Composer repository that indexes all projects with composer.json files across branches and tags.

GitHub

What is GitLab-Composer?

GitLab Composer repository is a script that creates a private Composer package repository by indexing all projects within a GitLab installation that contain `composer.json` files. It scans branches and tags across all projects, building a package index similar to Packagist.org but for internal use. This solves the problem of managing private PHP dependencies within organizations using GitLab.

Target Audience

PHP developers and teams using GitLab who need to manage private Composer packages internally. Organizations requiring a self-hosted alternative to Packagist for proprietary code.

Value Proposition

Developers choose this project because it provides a lightweight, self-hosted Composer repository solution specifically designed for GitLab environments. It offers Packagist-like functionality without external dependencies, with simple configuration and automatic package discovery across all projects.

Overview

Gitlab Composer repository

Use Cases

Best For

Creating private Composer repositories for internal PHP libraries

Related Projects

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub

162 stars42 forks0 contributors

Organizations using GitLab who need to share proprietary packages

Teams requiring a self-hosted alternative to Packagist.org

Managing dependencies across multiple GitLab projects with composer.json

Automating package discovery across branches and tags in GitLab

Setting up internal package registries for PHP development

Not Ideal For

Organizations using version control systems other than GitLab (e.g., GitHub or Bitbucket)
Teams requiring encrypted or hidden package listings for enhanced security
Large enterprises needing scalable, high-performance repositories with advanced API integrations
Projects already using Satis or commercial solutions that offer better access control

Pros & Cons

Pros

Automatic GitLab Scanning

Scans all branches and tags across GitLab projects to detect composer.json files, automating package discovery without manual setup, as highlighted in the key features.

Packagist-like Behavior

Mimics Packagist.org's functionality, ensuring compatibility with standard Composer workflows and providing a familiar interface for private repositories.

Minimal Configuration

Requires only basic steps like installing dependencies, copying a config file, and setting up a web server alias, per the installation instructions.

Flexible Name Validation

Allows enabling package name mismatches via a setting in gitlab.ini, preventing errors from copied composer.json files, as explained in the usage section.

Cons

Public Package Exposure

The package index is publicly listed by default, posing a security risk for proprietary code, as admitted in the caveats section of the README.

Limited Access Control

Lacks built-in mechanisms to protect the package list itself, relying on GitLab's project-level security and pointing to Satis for better solutions.

Manual Server Setup

Requires additional configuration like setting up cache directories and web server aliases (e.g., .htaccess), which can be complex for non-sysadmin users.

Open Source Alternative To

GitLab-Composer is an open-source alternative to the following products:

Satis

Satis is a static Composer repository generator for PHP projects, allowing teams to host private packages and manage dependencies without relying on external package repositories.

Packagist

Packagist is the main Composer repository for PHP packages, serving as the default package source for dependency management in PHP projects.

Frequently Asked Questions

Quick Stats

Stars162

Forks42

Contributors0

Open Issues4

Last commit7 years ago

CreatedSince 2013

Built With

Included in

Auto-fetched 10 hours ago

Home

Composer

Satisfy

Satis composer repository manager with a Web UI

Stars546

Forks112

Last commit1 year ago

Satis Control Panel

Satis Control Panel (SCP) is a simple web UI for managing your Satis Repository for Composer Packages.

Stars153

Forks29

Last commit7 years ago

#gitlab

#dependency-management