History: Composer
Source of version: 187 (current)
Copy to clipboard
Please also see:
((doc:Composer|A high level overview of how Tiki uses Composer)). See also ((How to pick a software library)). In 2021, we moved to [https://gitlab.com/tikiwiki/tiki/-/merge_requests/785/diffs|Composer v2], in time for ((Tiki23)) so it will be nice and robust for ((Tiki24))LTS. Ref: https://blog.packagist.com/composer-2-0-is-now-available/
!!# Introduction
If you are getting an error about Composer not being set up, run the setup script:
# Set permissions and run Composer
**{CODE(colors="shell")}sh setup.sh{CODE}
If you are having issues:
# Delete the -+vendor_bundled/vendor+- directory in your Tiki root. Composer will recreate it.
# Run setup.sh again
**{CODE(colors="shell")}sh setup.sh{CODE}
If one of the packages is not working for you (ex.: won't download, or some other error) and you don't need it for your Tiki, just:
# Delete the -+vendor_bundled/vendor+- directory in your Tiki root (Composer will just recreate)
# Remove the line for that package from -+vendor_bundled/composer.json+-
# Update the auto-generated dependency list.
** For developers {CODE(colors="shell")}./temp/composer.phar update --prefer-dist --working-dir="vendor_bundled"{CODE}
** For non-developers: {CODE(colors="shell")}./temp/composer.phar update --prefer-dist --working-dir="vendor_bundled" --no-dev{CODE}
# Run setup.sh again
**{CODE(colors="shell")}sh setup.sh{CODE}
Composer is a dependency management tool for PHP.
[https://getcomposer.org|Composer] maintains a list of dependencies using the __composer.json__ file and stores downloaded content into the -+vendor_bundled/vendor+- folder. Additionally, an autoload script is being generated to avoid handling the various paths generated.
Available packages can be found on [https://packagist.org|Packagist], the companion website.
---
!!# Description of various vendor folders
!!! Tiki17+
* -+vendor+-: for your libs managed in composer.json
* -+ vendor_bundled+-: libs bundled in Tiki. List is at -+vendor_bunded/composer.json+-
* -+vendor_custom+-: for custom libs, usually manually uploaded (if you need it)
* -+vendor_extra+-: for libs not yet managed by Composer
!!! Until Tiki16
* -+vendor+-: libs bundled in Tiki. List is at composer.json
* -+ vendor_custom+-: for custom libs, usually manually uploaded (if you need it)
* -+ vendor_extra+-: for libs not yet managed by Composer
!!# Production vs Development environments
!!!# Production Environment
The release process has been updated. Installation from built packages should not be affected.
Installations from Subversion need to be considered as development environments.
!!!# Development Environment
The composer install process has been added to the -+setup.sh+- script. Running it as usual should ensure composer is downloaded and executed.
Keep in mind this is a fairly new addition to the process. Some environments may run into issues until it is stabilized.
If your environment does not provide all of the tools required to automatically set-up the dependencies, you will need to perform a few steps manually:
# Download composer and store composer.phar in the -+temp/+- folder
** {CODE(colors="shell")} wget https://getcomposer.org/composer.phar -P temp{CODE}
# Run composer:
** {CODE(colors="shell")} php temp/composer.phar install{CODE}
!!!!- Note for Windows users
#method 1: Tiki-Composer
## Download the latest Composer [https://getcomposer.org/composer.phar|here]
## Save the file as <Tiki_path>/temp/composer.phar
## Right click and "unblock" the file
## in cmd.exe: (or your preferred command prompt)
*** > cd <Tiki_path>
*** (otherwise Composer won't find it's file)
*** > --php temp/composer.phar config process-timeout 5000-- now part of composer.json (note: extension phar support - php_phar.dll is included in php since 5.3.0 so no parameter is required in php.ini)
*** > php temp/composer.phar install (note : particularly if Apache is installed as a service, the path to php is not defined in path env var, then you should have to launch the command > <php_path>\php temp/composer.phar install)
# method 2: Global-Composer
## Use the [https://getcomposer.org/Composer-Setup.exe|Composer installer] to install Composer on your system
## Open a NEW command prompt and navigate to your Tiki
## > --composer config process-timeout 5000-- now part of composer.json
## > composer install
{REMARKSBOX(type="tip" title="You may need to install the openssl extensions")}
When you run composer, it may be that it complains that you don't have openssl extensions. If that is the case, follow the instructions on this pages
((Installing OpenSSL on Windows))
{REMARKSBOX}
(note : currently - 03/10/2013, in conditions that are not completely identified the composer-setup.exe can fail at several steps :
- the installer seems to lead to check some extensions (if defined) that are ===not ===directly related to composer (as composer team has answered, this involves particularly the YAZ context if the extension is activated and not well fully installed). This will lock on errors the installer and generates confusion when it happens.
- even you reach the 'ended and ready to close' step without error you can discover that the installer finally has done nothing. So the command "composer" is not available from system.
It is probably a general system path problem which is not checked by the installer. We give the advice to change the system path by adding the access to php and php/ext before running the installer.
- on Windows particularly when Apache is installed as a service, most of time the path to php is not included into the general access path. So the commands ">php" are not available. Composer as executable seems to need this path updated for installing and running.
If php is not declared into the system path the execution of composer.phar will be fully available from command line by running (after composer.phar download to <tiki>/temp) :
"tiki main path"><full php path>\php temp\composer.phar
!!# Managing dependencies
!!!# How to change composer.json packages and dependencies
When you need to use a certain composer package not available yet in composer.json file or update the tiki dependencies on existing packages:
# Update composer.json
# Generate a new composer.lock file
**{CODE(colors="shell")}./temp/composer.phar update --prefer-dist --working-dir="vendor_bundled"{CODE}
** You can review the differences with the old one via `svn diff`.
**If you notice a `dist.url` in packages array that is not pointing to composer.tiki.org, this means that satis configuration of composer.tiki.org should be updated. Please open -+doc/devtools/satis.json+- and add/change the package requirement in `require` section at the bottom of the file. Please see ((composer-tiki-org)) for more info.
**Make sure every package composer.lock file tries to load from an external url is properly required in satis.json.
# Then, you should be able to commit satis.json and let composer.tiki.org update which should happen within 10 minutes.
# After composer.tiki.org is updated, you should run again:
**{CODE(colors="shell")}./temp/composer.phar update --prefer-dist --working-dir="vendor_bundled"{CODE}
# Compare the differences of composer.lock file with svn. You should now not see any external urls in `dist.url` sections of packages array. Then, you can safely commit -+vendor_bundled/composer.json+- and -+vendor_bundled/composer.lock+- files.
__Important: when changing satis.json, be sure to not update (or remove) existing package requirements in a way that old packages are excluded. Older tiki versions require older package versions and we should be careful when updating package requirement to keep the old package still accessible.__ This implies the usage of ~ and >= specifiers instead of simply increasing the version number.
!!!!# Weekly updates of composer.lock
* https://sourceforge.net/p/tikiwiki/code/70743
* https://sourceforge.net/p/tikiwiki/code/73846
!!!# Adding dependencies
Adding dependencies is easy:
# Lookup the package name on [http://packagist.org/|Packagist] first.
## If you can find the package on Packagist go to point 6 to add it to satis.json
# If that doesn’t exist lookup for an alternative for simple code and take advantage of having a package manager by getting it from here: https://asset-packagist.org/
## If you can find the package on https://asset-packagist.org/ go to point 6 to add it to satis.json
# If that doesn't exist (or if those you find there are not the canonical version), try to see if you can work with the author to add it. Fabio has a lot of experience and can guide you if you have questions. Here is an example for [https://github.com/plotly/plotly.js/issues/1242|Plotly]
# If that is not working, use https://asset-packagist.org with these two commits as guides
** https://sourceforge.net/p/tikiwiki/code/65977
** https://sourceforge.net/p/tikiwiki/code/65978
# If that doesn't exist, look for a zip or svn/github repo.
# Add to [https://sourceforge.net/p/tikiwiki/code/HEAD/tree/trunk/doc/devtools/satis.json|doc/devtools/satis.json] in Tiki trunk.
**If the package exist on Packagist you just need to add a simple entry (with url) like: ~pp~"drmonty/smartmenus": ">=1.1.0",~/pp~
**If the package exist on asset-packagist you just need to add a simple entry (with url) like: ~pp~"bower-asset/fontawesome": ">=5.3.1",~/pp~
**Learn more about [https://getcomposer.org/doc/articles/handling-private-packages-with-satis.md|Satis here|box].
**Look at existing examples for the format.
**See also [http://getcomposer.org/doc/04-schema.md].
** Note: Before moving onto the next step, ensure that [https://composer.tiki.org] has successfully added your package. composer.tiki.org is updated every X hours from trunk
# Add the entry to the composer.json file for your branch by specifying the __full release version__.
** Composer allows for development branches and unstable packages. However, ideally, Tiki should only use released versions of software.
** Non-exact version numbers could cause conflicts. We don't want that.
# Clear the Composer cache as follows:
**{CODE(colors="shell")}rm -R ~/.composer/cache/{CODE}
# Update the auto-generated composer files by running
**{CODE(colors="shell")}php temp/composer.phar update --prefer-dist --working-dir="vendor_bundled"{CODE}
# Test and develop
# Commit your changes in -+vendor_bundled/composer.json+- and -+vendor_bundled/composer.lock+-
!!!! Here's a handy tool to test which versions you will be including in the json files
[https://semver.madewithlove.com]
!!!# Updating dependencies
Similar to adding dependencies.
# Add to [http://sourceforge.net/p/tikiwiki/code/HEAD/tree/trunk/doc/devtools/satis.json|doc/devtools/satis.json] in Tiki trunk (but don't remove the old one if it's still needed for a previous Tiki version)
** composer.tiki.org is updated every X hours from trunk
# Update the version number in composer.json
# Update composer.lock
** {CODE(colors="shell")}./temp/composer.phar update --prefer-dist --working-dir="vendor_bundled"{CODE}
** Note: if you are going to commit the lock file back to Tiki then run update __without__ the -+--no-dev+- option so the require-dev packages are included
http://versioneye.wordpress.com/2013/03/25/minimum-stability/
!!!!# Suppressing the Ambiguous Class Warning
You can add a pipe command to the normal composer.phar commands to hide all the annoying "Ambiguous class resolution" warnings that some of the old third party libraries generate during the autoload files generation, using:
{CODE(colors="shell")}php temp/composer.phar --no-dev install 2>&1 | sed '/Warning: Ambiguous class resolution/d'{CODE}
or after changing composer.json use:
{CODE(colors="shell")}php temp/composer.phar update -d vendor_bundled --prefer-dist 2>&1 | sed '/Warning: Ambiguous class resolution/d'{CODE}
** Note: the addition of the -+-d vendor_bundled+- parameter for Tiki 17+ only
!!!# Patching dependencies
[https://github.com/cweagans/composer-patches|cweagans/composer-patches] was [https://sourceforge.net/p/tikiwiki/code/61492|added] in ((Tiki17)) (and later enhanced). Although we always want to solve the issue upstream, sometimes, a patch needs to be maintained until things are sorted out.
Here are examples of usage: https://gitlab.com/tikiwiki/tiki/-/tree/master/installer/composer-patches/composer-patches.json
This requires the patch utility and [https://github.com/cweagans/composer-patches/issues/93#issuecomment-312703739|we are coordinating with upstream to do everything in PHP].
The patches should be versioned as binary files, to avoid problems with line breaks
!!!# Cleaning the vendor files
To remove unneeded 3rd party vendor files. See clean vendor files here:
https://gitlab.com/tikiwiki/tiki/-/tree/master/lib/core/Tiki/Composer
!!!# Being aware of outdated dependencies
* https://security.sensiolabs.org
!!!# System dependencies that can block SVN installs
If a system dependency is blocking svn installs, you can do like in this commit: https://sourceforge.net/p/tikiwiki/code/66977
!!# Troubleshooting Tips
!!!# Determining Whether the Failure is Related to Tiki
Composer is used for many PHP projects. If you have a general problem with Composer on your setup, first make sure it works outside of Tiki. Then once that works, try with Tiki to determine if the issue is specific to Tiki's implementation. If you discover dependencies to use Composer, please add to the Composer section of tiki-check.php
!!!# Within Tiki
# Run Composer in Tiki
+ {CODE(colors="shell")}sh setup.sh{CODE}
# Test within Tiki
+ {CODE(colors="shell")}php temp/composer.phar diagnose{CODE}
!!!# Test outside Tiki
# Get Composer
+ http://getcomposer.org/download/
# Run [http://getcomposer.org/doc/03-cli.md#diagnose|diagnose]
+ {CODE(colors="shell")}php composer.phar diagnose{CODE}
# Try to install Symfony:
+ http://symfony.com/doc/current/book/installation.html#option-1-composer
!!!# Runtime Exception
If you still get a RuntimeException, on downloading Zend, try:
{CODE(colors="shell")}php temp/composer.phar --no-dev update bombayworks/zendframework1{CODE}
or
{CODE(colors="shell")}composer update --prefer-dist bombayworks/zendframework1{CODE}
!!!# Uncaught exception
If you're getting an error message that starts with ''Fatal error: Uncaught exception 'ErrorException''' try using -+php-cli temp/composer.phar update+- instead of -+php temp/composer.phar update+-.
Try also to assign permission recursive manually (-+chown+-) of the entire Tiki directory to web user:web group so the Composer can download files and proceed.
!!!# Corrupted Download
If you got this error message:
{CODE(colors="shell")}The download is corrupted (phar "/var/www/sites/yourwebsitepath/html/temp/composer-temp.phar" has a broken signature).
Please re-run the self-update command to try again.{CODE}
Doing an "update" won't solve the issue, however re-installing will:
{CODE(colors="shell")}php temp/composer.phar install{CODE}
(thanks to Jonny)
!!!# Download Failures
System admins may try to run "setup.sh" as "root". This is a bad idea. Downloading composer files under root have great chance to fail due to permission error. If downloading keeps failing, try these steps:
#Delete -+temp/composer.phar+-
#Clear the Composer cache as follows:
+ {CODE(colors="shell")}rm -R ~/.composer/cache/{CODE}
#Retry using another user than root or try:
+ {CODE(colors="shell")}sudo sh setup.sh{CODE}
!!!# PHP version used on OSX (may be applicable for WAMP on win)
The php version installed with Mac OSX may be different from the one you use with your dev environment (Brew, MacPorts, MAMP or other?). Changes are it is not the one you use on your local. The script setup.sh will try to determine one or several path to check if version and extensions installed are up to date with composer before running it. It may fell to find the path of the php you are using with MAMP (or MAMP Pro). You can then edit or create a file t ~/.bash_profile and add the follwing:
{CODE(colors="shell")}export PATH=/Applications/MAMP/bin/php/PHP_VERSION_YOU_USE/bin:$PATH{CODE}
Save and restart your terminal (refreshing it may be enough).
{CODE(colors="shell" caption="refresh terminal settings")}
source ~/.bash_profile
{CODE}
In some other cases (MAMP) it is preferable to declare directly the exact path of the php (version) you want to use.
{CODE(colors="shell")}
sh setup.sh -p /Applications/MAMP/bin/php/php7.4.12/bin/php
{CODE}
!!!# Error after switching from a previous branch (Ie switching from 16x to 17x)
When switching from a branch to a newer one some error caused by changes in the way Tiki set or handle Composer may occurs.
You may have to delete caches or some files from previous install.
IE:
{CODE()}Fatal error: Uncaught exception 'Symfony\Component\DependencyInjection\Exception\InvalidArgumentException' with message 'You cannot set service "service_container".'{CODE}
Is solved by deleting : temp/cache/container.php
!!!# Cannot allocate memory error
''Happened to me installing Tiki21 alpha'' {sign user="Bsfez" datetime="2020-02-24T07:39:14+00:00"}
Your php may run out of memory on running and in the case given as sample installing a dependency.
{CODE(caption="Example of memory error")}
Gathering patches for dependencies. This might take a minute.
- Installing plotly/plotly.js (v1.52.2): Downloading (65%)
mmap() failed: [12] Cannot allocate memory
mmap() failed: [12] Cannot allocate memory
PHP Fatal error: Out of memory (allocated 146796544) (tried to allocate 132120608 bytes) in phar:///var/www/virtual/dev.example.fr/html/temp/composer.phar/src/Composer/Util/RemoteFilesystem.php on line 598
{CODE}
To check the memory limit value in your php.ini file you can run:
~pp~php --info | grep memory_limit~/pp~
You need to find what php is running the specific process (the process may use a different one than the one you set for the all setup.sh script) and adjust the "memory_limit" setting to "-1" (no limit) or any limit you want.
In my case the following command from within the Tiki directory didn’t return the Configuration File .ini to change but the website php (php7.2)
~pp~php --ini~/pp~
!!!! Troubleshooting steps on clearOs 7 while running composer on Tiki21 alpha
{CODE(caption="Check php memory limit")}
php --info | grep memory_limit
memory_limit => 128M => 128M
{CODE}
{CODE(caption="Check which php the core is running")}
php -v
PHP 5.4.16 (cli) (built: Nov 1 2019 16:04:20)
Copyright (c) 1997-2013 The PHP Group
Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies
{CODE}
{CODE(caption="Locate the different php.ini files")}
locate php.ini
/etc/php.ini
/etc/opt/rh/rh-php70/php.ini
/etc/opt/rh/rh-php71/php.ini
/etc/opt/rh/rh-php72/php.ini
.../... there are more results but they aren’t relevant.
{CODE}
I edited /etc/php.ini, change the memory_limit from "128M" to "-1" and restarted services. (in doubt I restarted both)
{CODE(caption="restart services")}
restart mysql.service httpd.service
systemctl restart rh-php72-php-fpm.service httpd.service
{CODE}
I re run sh setup.sh and the installation completed.
I reset back the value to 128M as it is a protection to stop a broken process to exhaust your server memory.
!!# Bluehost
If you are on Bluehost, please see: ((tw:Bluehost))
!!# Shared Hosts and website control panel (Virtualmin, etc)
The Tiki developers implemented in the setup.sh script (the script that runs Composer install) commands to look for [https://doc.tiki.org/Requirements#PHP_|the best PHP candidate version accordingly to your Tiki version]. Since Tiki24 it is very accurate and you should be able to run the setup.sh script without additional parameters.
However on shared web hosting services that offer a choice of different PHP versions, due to unpredictable setup, you may be required to set the PHP path in order to apply the chosen PHP version when running Composer through shell. This happens when shell uses a default PHP version even when phpinfo within Tiki shows the chosen version (the version used in shell can be checked by typing -+php -v+-). This can cause Composer to not run if the default version is older than the minimum required version. For such cases, the way to correct it is to set the path to the right PHP version in a -+~/.bashrc+- file in your home directory.
{TABS(name="code_style_config" tabs="Tiki 24 +|Tiki 24 -")}
On a fresh git install (not a [https://tiki.org/Get-Tiki|release package]) you have to run;
{CODE()}sh setup.sh{CODE}
The script will check different elements of your environment and using the command "c" (run composer) will install requirement elements for your Tiki instance to work.
The first row of the output will confirm if the script was able to find the PHP version that matches your Tiki version.
{CODE(caption="For exemple")}
Your choice [c]? c
Wrong PHP version: php81. A version >= php74 and <= php80 is necessary.
Searching for typically named alternative PHP version ...
... correct PHP version php7.4 detected and used
{CODE}
/////
Website control panel (Virtualmin, Plesk, CPanel, etc) comes with install scripts that install tools and configuration them for the user. They allow using several version of PHP therefore you may have to adapt and give the setup.sh script details on your configuration.
Below are a couple of examples:
!!!!# Set php to be used with setup.sh (PHP CLI version)
While setup.sh look for "php72", "php7.2" or "php7.2-cli" your hosting company or server admin may use a slightly different name for the php path you need to run Composer.
{CODE(caption="Different path for PHP 7.2 in a shared host environment")}
sh setup.sh -p php-7.2
{CODE}
!!!!# Set PHP PATH to be used with setup.sh (this worked with Plesk using Centos 7)
Tested with Centos 7 and Tiki23
{CODE(caption="Path for PHP 7.4 in a shared host environment")}
sh setup.sh -p /opt/plesk/php/7.4/bin/php
{CODE}
!!!!# Set PHP PATH to be used with setup.sh (this worked with SiteGround)
It is possible with Tiki20 (may be with previous version too) to set the PATH setup.sh will use to point to the right PHP version.
{CODE(caption="Path for PHP 7.2 in a shared host environment")}
sh setup.sh -p /usr/local/php72/bin/php-cli
{CODE}
!!!!# Set PHP PATH to be used with setup.sh after php8 update on virtualmin
You can check the path of the CLI you want to use by using -+ls -l /usr/bin/+-.
You will be able to see all the php version installed. To use PHP7.4:
{CODE()}sh setup.sh -p /usr/bin/php7.4{CODE}
!!!!# Set PATH variable (this worked with HostGator)
# Modify (or create) your -+~/.bashrc+- file to prepend the correct path to the PHP file you want to use. For example, if the PHP executable file is at -+/opt/php55/bin/php+-, you would add the following command:
+ -+export PATH=/opt/php55/bin:$PATH;+-
# Then type -+source ~/.bashrc+- in shell for the change to take effect before running composer or -+sh setup.sh+-
!!!!# Use Full PHP Path to Run Composer Directly
This is a little hacky, but if nothing else is working, instead of running composer through -+sh setup.sh+-, composer can be run directly using the specific PHP path you desire, for example:
-+/usr/local/php56/bin/php temp/composer.phar --no-dev update+-
{TABS}
!!# Composer.tiki.org
* --[http://tiki.org/tiki-view_forum_thread.php?comments_parentId=46715|composer.tiki.org]-- fixed by running Satis
* --Find a solution for versions-- Done
* --use https when possible-- done
* --As part of the release process, have a way to check Composer packages vs original code-- Added to ((Releasing))
!!!# To flush out an incorrect package on composer.tiki.org
If you happen (as I did {sign user="jonnybradley" datetime="2015-02-24T17:47:09+00:00"}) to commit a mistake in satis.json, i.e. link to the wrong zip file for instance as corrected in {commit id=54048}, composer.tiki.org will continue to serve up the wrong file until that package is updated again, so here's how to fix it.
* First get a friendly member of the ((tw:Infrastructure Team)) with some spare time to help :)
* They will need to remove the offending package file and it's cached copy, then run the satis rebuild script, here is an example with the chosen zip above:
{CODE(colors="shell")}cd /var/local/composer.tiki.org/bin/satis/
rm /var/local/composer.tiki.org/www/dist/jquery-plugins-chosen-1.3.0.zip
rm ~/.composer/cache/files/jquery/plugins/chosen/1.3.0.0-1.3.0.zip -- if it exists
mv satis.json.prev satis.json.prev.bak -- reset for the satis build script
/etc/cron.hourly/qualityupdate -- contains the satis/composer build commands as well as the code.tiki.org script
{CODE}
!!!# To make sure all packages are linked directly from composer.tiki.org
''Needed for environments where only composer.tiki.org is allowed as a repository''
* Search through -+vendor_bundled/composer.lock+- for the regular expression -+dist[^\}]*\.com+- and locate packages not on composer.t.o
* Check if the package is available on https://packagist.org (easiest if it is)
* Search again in the composer.lock file for where the package is required (often as a dependency of another package), and copy the name and version requirement
* Add that to -+doc/devtools/satis.json+- in trunk, commit and wait for it to (hopefully) appear on https://composer.tiki.org
* Delete your local -+vendor_bundled/composer.lock+- and -+vendor_bundled/vendor+- directory
* Run `php temp/composer.phar clearcache`
* Run `php71 temp/composer.phar update -d vendor_bundled --prefer-dist` (whatch out for using the correct php version for the branch you are updating)
!!# Other notes
!!! 2013-07-11 topics to discuss with Nils
LP & Marc will see Nils at http://www.phpquebec.org/content/composer-project-dependency-management-php and we'll discuss with him:
* [http://tiki.org/tiki-view_forum_thread.php?forumId=26&threadId=47716|The checksum verification of the file failed]
** This is reported to be fixed
* Continue on error (if package is not available)
** [http://sourceforge.net/p/tikiwiki/code/47123|Now, retries on failure]
* zip/unzip perms for FullCalendar
* Satis override composer.json
* See if tiki-admin.php could report if composer is up to date
* Sbox_aufs specific issues
!!! Some handy aliases for your ~/.bashrc (or ~/.profile depending on platform)
{CODE(colors="shell" theme="default")}alias composerupdate='php temp/composer.phar update -d vendor_bundled --prefer-dist 2>&1 | sed '\''/Warning: Ambiguous class resolution/d'\'''
alias composerinstall='php temp/composer.phar install -d vendor_bundled --prefer-dist 2>&1 | sed '\''/Warning: Ambiguous class resolution/d'\'''
{CODE}
!!# Web-based management
Something like [http://php.net/manual/en/function.proc-open.php|proc_open] should be used to run it
* https://github.com/CurosMJ/NoConsoleComposer
* http://stackoverflow.com/questions/15969948/use-composer-without-ssh-access-to-server
* http://stackoverflow.com/questions/20894518/how-do-i-install-composer-on-a-shared-hosting
* http://stackoverflow.com/questions/17219436/run-composer-with-a-php-script-in-browser
* https://github.com/composer/composer/issues/2545
* https://github.com/composer/composer/issues/2684
!!# Optional libraries
See ((Install optional libraries in Tiki via Composer))
Composer was originally to permit the phpBB project to manage their extensions
* Optional components should part of the plan for ((File and directory structure revamp))
* https://mediawiki.org/wiki/Composer/For_extensions
* https://github.com/wikimedia/composer-merge-plugin (Merge one or more additional composer.json files at Composer runtime)
* https://github.com/contao-community-alliance/composer-client
* https://www.drupal.org/project/composer_manager
!!!# Options to implement optional libraries
The should be an option via the command line, and via FTP to add additional optional libraries
!!!!# Option via command line require
{CODE(caption="How to add a lib" colors="shell" theme="default")}php temp/composer.phar require mpdf/mpdf "*"
php temp/composer.phar update --prefer-dist
{CODE}
!!!!! Pros
* Works
!!!!! Cons
* Will break on FTP upgrades
* Can cause merge issues even on svn
* Requires command line
!!!!! Notes
* For this to work, we should store the config in the database, so it can be re-ran at each upgrade
* Will this work with installs without shell access?
!!!!! Split composer.json information into two files
Similar to https://github.com/symfony/symfony-standard/blob/master/composer.json and https://github.com/symfony/symfony/blob/master/composer.json, we could split in two files.
tiki-base/composer.json would have most of the information we have today.
tiki/composer.json would call tiki-base/composer.json and permit end users to add their own dependencies, either manually or via the require command. It reduces the odds of merge conflicts
!!!!# Option Mediawiki Composer plugin
* https://github.com/wikimedia/composer-merge-plugin/blob/master/composer.json
!!!!! Pros
* Used by others so must work
* Possible to have multiple composer.json files and have them merged
!!!!! Cons
An extra lib to maintain
!!!!! Notes
* Will this work with installs without shell access?
!!!!# plugins.roundcube.net
Another to investigate: https://plugins.roundcube.net/
!!!!# Composer/Installer/PluginInstaller.php
https://github.com/composer/composer/blob/master/src/Composer/Installer/PluginInstaller.php
!!!!# Locations of optional libraries
* /vendor/ directory should be deletable so it can be re-created by Composer (and thus libs listed in composer.json ) So for manual downloads, perhaps vendor_custom or vendor_local or something else?
* See also: ((File and directory structure revamp))
* Files will be detected by ((doc:Security Admin|#Check_your_files|security check on files))
!!!!# Other options
* https://github.com/francoispluchino/composer-asset-plugin
!!!# Lesser-known Composer tricks
With Jordi: https://youtu.be/mdrR-ynTZIk?t=2262
!!# Related
* https://github.com/vinkla/climb/blob/master/README.md
* https://github.com/composer/installers
* http://composer.tiki.org
* https://igor.io/2013/09/04/composer-vendor-directory.html
* http://robloach.github.io/component-installer/
* https://github.com/component/component/wiki/F.A.Q
* [http://composer.json.jolicode.com/|Composer Cheat Sheet for developers]
* https://github.com/clue/graph-composer
* http://12factor.net/dependencies
* ((VersionEye))
* http://depending.in/
* https://vinkla.com/2016/composer-outdated/
* http://www.jsdb.io/
* https://github.com/FitchLearning/satisfy
* http://webtips.krajee.com/using-forked-version-of-packages-with-composer/
* http://webtips.krajee.com/setting-composer-minimum-stability-application/
* ((Composer package version strategy))