Philipp Scheit

New in Private Packagist, August '26 update: Organization-wide supply chain security controls, MFA enforcement for CLI access, GitLab subgroup sync, artifact packages for suborgs via API, and more complete audit logging. blog.packagist.com/whats-new-i... #php #phpc #composerphp

Ich finde 35 eur Nenngeld für Turniere mit Spiralsystem für 2 Spiele U10 zu viel Geld. Seht ihr das auch so? #tennis

Someone raising kid(s) with ambitions to become "pro" in their sport? Would love to compare notes!

Ever found yourself accidentally merging changes to the public API of a PHP package and regretting it later? I made a GitHub Action to help prevent that. seld.be/notes/surfac...

Team is on a release-rage-supply-chain-security-week :D Go Team!

🛡️ Composer's download fallback behavior can silently override security decisions at the repository side, falling back from a blocked Private Packagist URL to GitHub or a source clone. Two new Private Packagist options close it off. blog.packagist.com/closing-comp... #php #phpc #composerphp

📦 Composer 2.10 is out. Native malware filtering via @aikidosecurity.bsky.social (enabled by default on Packagist), a unified config.policy framework for advisories/abandoned/malware, and source fallback now deprecated. blog.packagist.com/composer-2-1... #php #phpc #composerphp

🚨 Security advisory: Composer 2.9.8 and 2.2.28 fix a vulnerability leaking GitHub Actions GITHUB_TOKENs to job logs via error messages. Update now or disable affected workflows. blog.packagist.com/composer-2-9... #composerphp #phpc #php

So.. been in bed since tuesday, I think I derserve now to drop this infect/cold/whatever!

Why do i keep teaching Claude things in a session. I need to stop that.. Or talk to humans from time to time, lol Today I messaged a customer and wanted to write "Cloud" but typoed "Claud"

so you think i can stop this hanging build , where the last output was 44days ago? 😬

Doing printing things

Finally diving into the core parts of our webapp: yaymeories.com has become yayphotobooks.com Parts i did not touch for a year. There is so much code rot! You get better, php gets better, symfony gets better, you learn new libraries (like Valinor). So much fun to change it!

Fascinating evening organized by the @sovereign.tech in Berlin tonight: Presenting their #SovereignTechFellowship program which funds individual open source maintainers of our digital infrastructure with public money.

Proud to announce we just renewed our annual $18,000 sponsorship for the The PHP Foundation! Check out this summary on the work completed in 2025. So much more could be accomplished, if all businesses using PHP contributed. Sign up as a sponsor and help moving PHP forward!

I like the starting on dev.to. a) I can finally use claude to create my posts, review them in dev.to and publish them there b) Just started to post yesterday and got already two meaningful interactions: dev.to/pscheit/tric...

So a new personal site (pscheit.de) cries for new articles, right? So I went ahead and I quickly drafted something for you: dev.to/pscheit/the-... Defeat to the lazy lurk!

Finally, finally updated my personal page, haha. This was SOOO overdue pscheit.de

Back from our annual #SymfonyCon trip! Great experience celebrating 20 years of #Symfony with its community in Amsterdam. The @packagist.com booth was busy throughout the event, and my package manager security outlook talk sparked good conversations. See you in Warsaw 2026! #php #composerphp

💥 Shoutout to our Gold Sponsor: @PrivatePackagist! 🥇 Thanks for fueling innovation and supporting #SymfonyCon Amsterdam 2025! 🚀💛 👏 You rock! #PHP #Symfony #Sponsor

I am so tired... Tested an deactivated encharge flow for an hour... :facepalm:

New in Private Packagist: Usage Tracking can now help prioritize security updates by showing how deps cascade through projects and where vulnerable versions are used. Trusted Publishing for GitHub Actions and better synchronization setup. blog.packagist.com/whats-new-in... #php #phpc #composerphp

After Composer 2.9 CLI security improvements, we're working on a transparency log for Packagist to strengthen PHP supply chain security, funded by the @sovereign.tech with help of the @thephpf.bsky.social and Private Packagist. Details at blog.packagist.com/strengthenin... #php #phpc #composerphp

Composer 2.9 is here! 🚀 It automatically blocks packages with known vulnerabilities, has a new repository command to manage repos from the CLI, and lots more! blog.packagist.com/composer-2-9/ #composerphp #phpc #PHP

Claudes most annoying sentences: These failures are unrelated to my changes. You're absolutely right

After 5 years DDD I finally get to understand BoundedContexts in practice. This was a crazy journey!

Hehe, have you ever "copied code from another project" the TDD style? Teaching this to Claude right now.. Never thought that this is something special I do. You still begin with an empty class and see what you need to copy - line by line - improve it along the way.

MIch wundert nix mehr, der Klassenlehrer so: Bitte geben Sie Ihrem Kind nach Möglichkeit einen Löffel, ein Schälchen und eine Küchenreibe mit.

Does someone know why Claude thinks i am "You are absolutely right!" Maybe I am but not all the time? Feels like its just brabbling along with whatever shit I come up with? Is it because it wouldn't do "what i want"? So its baked in? "Always trust the user"? how is this done scientifically?

I am gonna teach you real TDD! If you like it or not.. Claude: 🫢 It's getting there.. it's getting there. I just have to reject the code now and just write "TDD" then Claude usually knows whats up :D "Oh right, i did not see the test failing FIRST, let me run it..."

Bitbucket Cloud is retiring app passwords in favor of API tokens. If you're using Private Packagist with Bitbucket Cloud, migrate now to avoid future disruptions. Our blog post explains it step-by-step: blog.packagist.com/bitbucket-de... #php #composerphp #phpc #privatepackagist #bitbucket

Together with PyPI, Maven Central, cratesio and other major package registries we signed a statement on sustainable open source infrastructure. 3B+ installs/month and evolving #composerphp and packagist.org requires sharing the costs. #phpc #php

Its called the 1,2,3 rule 1 thing will go wrong (at least) 2 trips to the hardware store / team manager 3 times as long as you planned :)

Könnt ihr hier: a) mir sagen warum die Schnittstelle obsolete ist, und was man anstelle dessen nutzen soll? (spoiler: ich weiß es schon ...) b) den Cookie banner wegclicken? www.bzst.de/DE/Unternehm... Man beachte: das ist eine OFFIZIELLE Seite unseres Landes #digitalisierung-ist-neuland

Someone doing eventsourcing with #PHP ? Do you use a framework?

I love startups. "Any chance you can bump up my pre-order? The kids are waiting desparately for it" "yeah sure, I put your shipping label on the top of the stack" fasttracktennis.eu

Wer von euch Knallköppen hat eigentlich die eVatR Rest-Api die "neue" API vom bff gebaut? Ich muss ja nur diese YAML posten... api.evatr.vies.bzst.de/api-docs

What's a time tracking process that works for you? I regularly for get to end or switch what I'm tracking, despite it being pretty easy and on web as well as my phone. What tools do you prefer and how did you fix this problem? Are there analogue devices that help keep this present at all times?