Review and address all outdated or abandoned dependencies in vendor_bundled/composer.json
- Status
- Closed
- Subject
- Review and address all outdated or abandoned dependencies in vendor_bundled/composer.json
- Category
- Technical debt (dependencies, refactor, etc.)
- Resolution status
- New
- Submitted by
- bienvenu ushindi
- Lastmod by
- bienvenu ushindi
- Rating
- Description
Brainstorming and decisions would be better to have in public as per https://dev.tiki.org/How-to-pick-a-software-library
and summary can be on https://gitlab.com/tikiwiki/tiki/-/blob/master/vendor_bundled/composer.json
laminas/laminas-text (Assigned to: @bienvenu ushindi) Replaced here https://gitlab.com/tikiwiki/tiki/-/merge_requests/8095

AlternativePackageName Class Namespace PHP version Contribution Activity Selected povils/figlet 
Povils\Figlet\Figlet php5 last contribution: 3 years ago
Install by: 5 743
Github Stars: 59
Github fork: 23 more
Status: NO
Why: Can't be used without setting a background , Very old and no support for php8amasiye/figlet 
Amasiye\Figlet\Figlet php8.2 last contribution: 11 months ago
Install by: 200 more
Status: NO
Why: Can't be used without setting a background, No support for width but this is also a potential candidate. It is a fork of povils/figletMacrame 
Gbhorwood\Macrame\Macrame ✅ php7.5 and higher last contribution: 3 months
Install by: not availableStatus: NO
Why: It has an issue that I reported here
and Currently there is no support for width which solve responsiveness issue but it is a potential candidate. This also dependends on povils/figlet when we check the dependencies listConclusion
The laminas/text package was officially archived in December 2024. However, no actively maintained PHP FIGlet library currently provides comparable functionality. Given the package’s stability and the limited scope of our use case, I propose we retain it for now and add an inline comment to document its deprecated status. This will make future replacement easier should a suitable alternative emerge.
Note: I found a npm-based figlet
alternative, which can produce similar results. However, it introduces additional complexity and dependencies compared to the current PHP-based solution, making it less ideal for this lightweight use case.
Related: https://github.com/laminas/laminas-captcha/issues/41
OK please add info to https://gitlab.com/tikiwiki/tiki/-/blob/master/vendor_bundled/composer.json
and see if you can find a way to suppress warnings about it.
1.2. candy-chat/xmpp-prebind-php (Assigned to: @Olivier Kango)
After an in-depth evaluation of available packages and compatibility requirements for PHP 8+, the following conclusions have been reached regarding the deprecated
candy-chat/xmpp-prebind-php:AlternativePackageName Class Namespace PHP version Contribution Activity Selected dusta/xmpp-prebind-php 
XmppPrebind PHP >= 5.6 Very low usage (16 installs) Unimproved fork (last updated 2018) Not selected andrea11/xmpp-prebind-php 
XmppPrebind PHP >= 5.3 Very low usage (23 installs) Exact clone (no forks, 2016) Not selected zorn-v/xmpp
Fabiang\Xmpp* PHP ≥ 7.2, PHP 8.0+ ~8,346 installs, Active (last update March 2025, fork of fabiang/xmpp) Not Selected.
Not a drop-in replacement for XmppPrebind, but modern, maintained, supports SCRAM-SHA.pbxapi/xmpp-php
XmppPrebind PHP ≥ 7.0 Very low usage, ~0 stars, 1 fork, last update 4 years ago. Provides Prebind for PHP backends (tested with Openfire, ejabberd). Candidate: Closest
functional replacement for candy-chat/xmpp-prebind-php, but project inactive.
Not Selected
Challenge documented in: https://gitlab.com/tikiwiki/tiki/-/blob/master/vendor_bundled/composer.json
1.3. jasig/phpcas (Assigned to: @Espoir Baraka) Replaced here https://gitlab.com/tikiwiki/tiki/-/merge_requests/8071
by @Doddy MatabaroCheck this item118571-phpCAS-is-unmaintained for extra information
AlternativePackageName Class Namespace PHP version Contribution Activity Selected CAS-Bundle 
EcPhp\CasBundle PHP 8.1 last contribution: 3 months
Star: 46
Fork: 9Status: NO
Why: This is used for symfony project
@Espoir Baraka: yes but it uses https://github.com/ecphp/cas-bundle/blob/master/composer.json
phpCAS 
Psr\Log\LoggerInterface php 7.1 last contribution: 10 months
Star: 796Status: NO
Why: phpCAS is no longer maintained1.4. laminas/laminas-log (Assigned to: @Olivier Kango) https://gitlab.com/tikiwiki/tiki/-/merge_requests/7506

AlternativePackageName Class Namespace PHP version Contribution Activity Selected monolog/monolog Monolog\Logger PHP >= 8.1 Last contribution: 3 weeks ago
Used by: +7.5KStatus: YES
Why: Actively maintained, widely adopted, PSR-3 compliant1.5. laminas/laminas-config (Assigned to: @Doddy Matabaro) https://gitlab.com/tikiwiki/tiki/-/merge_requests/7792

AlternativePackageName Class Namespace PHP version Contribution Activity Selected hassankhan/config Hassankhan\Config\Config PHP >=5.4 last contribution: 2017-11-06 (archived)
Used by: ~600Status: NO
Why: Archived, not maintained, lacks modern PHP compatibilityleague/config League\Config PHP >=7.4 last contribution: 2 months ago
Used by: ~1KStatus: NO
Why: Strict on immutable configs and requires more structural changesNative Tiki Config Tiki\Config\Config PHP >=8.0 Ongoing
Used by: Tiki core itselfStatus: YES
Why: Fully compatible with Tiki's needs, preserves existing behavior (merge, nesting, readOnly), minimal changes across codebase. 1.6. laminas/laminas-mail and laminas/laminas-mime (@bienvenu ushindi)
Check item118613-Deal-with-the-abandonment-of-laminas-mail-and-laminas-mime for more details
1.7. laminas/laminas-oauth
https://gitlab.com/tikiwiki/tiki/-/merge_requests/7591/
1.8. laminas/laminas-twitter
Was used by laminas/laminas-oauth which got replaced in https://gitlab.com/tikiwiki/tiki/-/merge_requests/7591/
1.9. laminas/laminas-crypt
Was used by laminas/laminas-oauth which got replaced via https://gitlab.com/tikiwiki/tiki/-/merge_requests/7591
1.10. php-http/message-factory (Assigned to: @bienvenu ushindi)
https://gitlab.com/tikiwiki/tiki/-/commit/e916b26e4aac849d13cdf51156aa7f6e74191a26
1.11. laminas/laminas-dom (Assigned to: @bienvenu ushindi) https://gitlab.com/tikiwiki/tiki/-/merge_requests/8001

1.12. laminas/laminas-loader (Assigned to: @bienvenu ushindi) No MR
https://gitlab.com/tikiwiki/tiki/-/commit/98308faf844877011038fc60c3a02489bbedffd9
- Solution
- Workaround
- Importance
- 3
- Easy to solve?
- 2
- Priority
- 6
- Demonstrate Bug on Tiki 19+
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show2.tiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Demonstrate Bug (older Tiki versions)
-
This bug has been demonstrated on show.tikiwiki.org
Please demonstrate your bug on show.tikiwiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show.tikiwiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Ticket ID
- 8736
- Created
- Monday 04 November, 2024 07:22:50 UTC
by bienvenu ushindi - LastModif
- Tuesday 24 February, 2026 21:42:18 UTC