Composer end of life: end of support by version
PHP-Community · Development & DevOps
For Composer by PHP-Community, patchletter knows 12 support cycles. 10 of them have already ended and receive no more security updates. The next support window closes on 31/12/2026, 53 days from now. The current version of Composer is 2.11.1. The cycles come from the open endoflife.date project, last reconciled on 07/11/2026.
When does support end for which Composer version?
A cycle is a maintained version line. Where a date is given, support ends on that day. After it the vendor ships no more security updates for that line.
| Cycle | Latest version | End of support | Status |
|---|---|---|---|
| 2.11 | 2.11.1 | no date on record | supported |
| 2.10 | 2.10.3 | 10 days ago | End of Life |
| 2.9 | 2.9.8 | 164 days ago | End of Life |
| 2.8 | 2.8.12 | 360 days ago | End of Life |
| 2.7 | 2.7.9 | 767 days ago | End of Life |
| 2.6 | 2.6.6 | 1004 days ago | End of Life |
| 2.5 | 2.5.8 | 1164 days ago | End of Life |
| 2.4 | 2.4.4 | 1419 days ago | End of Life |
| 2.3 | 2.3.10 | 1545 days ago | End of Life |
| 2.2LTS | 2.2.31 | 53 days left | EOL in 53 days |
| 2.1 | 2.1.14 | 1782 days ago | End of Life |
| 2.0 | 2.0.14 | 1984 days ago | End of Life |
Which Composer versions no longer receive security updates?
10 of 12 cycles have ended. If you run one of those lines, the vendor ships you no more patches, not even for critical flaws.
- Composer 2.102.10.3
- Composer 2.92.9.8
- Composer 2.82.8.12
- Composer 2.72.7.9
- Composer 2.62.6.6
- Composer 2.52.5.8
- Composer 2.42.4.4
- Composer 2.32.3.10
- Composer 2.12.1.14
- Composer 2.02.0.14
Where does the EOL data for Composer come from?
From the open endoflife.date project, which collects vendors' official support commitments. patchletter reconciles the cycles daily; the Composer data is as of 07/11/2026. In case of doubt the vendor's own lifecycle page applies. patchletter deliberately stores no vendor full texts.
New Composer versions by email
Tick the product and patchletter reports new releases by email. The update email costs nothing, and one click stops it again. The warning 90, 30 and 7 days before support ends is part of patchletter Pro.