Magento Open Source packages

The Magento application uses Composer to manage PHP packages. The composer.json file declares the list of packages, whereas the composer.lock file stores a complete list of the packages (a full version of each package and its dependencies) used to build a release version of the Magento application. The following tables list packages from the composer.lock file for Magento Open Source 2.4.

Magento packages

This section contains information about the magento dependencies for the latest Magento Open Source 2.4 release. Click the Name links to view the repository and the license agreement.

Required packages

Name Version License Description
magento/composer 1.6.0 OSL-3.0AFL-3.0 Magento composer library helps to instantiate Composer application and run composer commands.
magento/magento-composer-installer 0.1.13 OSL-3.0 Composer installer for Magento modules
magento/zendframework1 1.14.4 BSD-3-Clause Magento Zend Framework 1

Supported packages for development

Name Version License Description
magento/magento-coding-standard 5 OSL-3.0AFL-3.0 A set of Magento specific PHP CodeSniffer rules.
magento/magento2-functional-testing-framework 3.0.0 AGPL-3.0 Magento2 Functional Testing Framework

Third party packages

This section contains information about third party packages for the latest Magento Open Source 2.4 release. Click the Name links to view the repository and the license agreement.

Required packages

Name Version License Description
colinmollenhour/cache-backend-file v1.4.5 BSD-3-Clause The stock Zend_Cache_Backend_File backend has extremely poor performance for cleaning by tags making it become unusable as the number of cached items increases. This backend makes many changes resulting in a huge performance boost, especially for tag cleaning.
colinmollenhour/cache-backend-redis 1.11.0 BSD-3-Clause Zend_Cache backend using Redis with full support for tags.
colinmollenhour/credis 1.11.1 MIT Credis is a lightweight interface to the Redis key-value store which wraps the phpredis library when available for better performance.
colinmollenhour/php-redis-session-abstract v1.4.2 BSD-3-Clause A Redis-based session handler with optimistic locking
composer/ca-bundle 1.2.7 MIT Lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle.
composer/composer 1.10.9 MIT Composer helps you declare, manage and install dependencies of PHP projects. It ensures you have the right stack everywhere.
composer/semver 1.5.1 MIT Semver library that offers utilities, version constraint parsing and validation.
composer/spdx-licenses 1.5.4 MIT SPDX licenses list and validation library.
composer/xdebug-handler 1.4.2 MIT Restarts a process without Xdebug.
container-interop/container-interop 1.2.0 MIT Promoting the interoperability of container objects (DIC, SL, etc.)
elasticsearch/elasticsearch v7.7.0 Apache-2.0 PHP Client for Elasticsearch
ezimuel/guzzlestreams 3.0.1 MIT Fork of guzzle/streams (abandoned) to be used with elasticsearch-php
ezimuel/ringphp 1.1.2 MIT Fork of guzzle/RingPHP (abandoned) to be used with elasticsearch-php
guzzlehttp/guzzle 6.5.5 MIT Guzzle is a PHP HTTP client library
guzzlehttp/promises v1.3.1 MIT Guzzle promises library
guzzlehttp/psr7 1.6.1 MIT PSR-7 message implementation that also provides common utility methods
justinrainbow/json-schema 5.2.10 MIT A library to validate a json schema.
laminas/laminas-captcha 2.9.0 BSD-3-Clause Generate and validate CAPTCHAs using Figlets, images, ReCaptcha, and more
laminas/laminas-code 3.4.1 BSD-3-Clause Extensions to the PHP Reflection API, static code scanning, and code generation
laminas/laminas-config 2.6.0 BSD-3-Clause provides a nested object property based user interface for accessing this configuration data within application code
laminas/laminas-console 2.8.0 BSD-3-Clause Build console applications using getopt syntax or routing, complete with prompts
laminas/laminas-crypt 2.6.0 BSD-3-Clause  
laminas/laminas-db 2.11.3 BSD-3-Clause Database abstraction layer, SQL abstraction, result set abstraction, and RowDataGateway and TableDataGateway implementations
laminas/laminas-dependency-plugin 1.0.4 BSD-3-Clause Replace zendframework and zfcampus packages with their Laminas Project equivalents.
laminas/laminas-di 2.6.1 BSD-3-Clause  
laminas/laminas-diactoros 1.8.7p2 BSD-3-Clause PSR HTTP Message implementations
laminas/laminas-escaper 2.6.1 BSD-3-Clause Securely and safely escape HTML, HTML attributes, JavaScript, CSS, and URLs
laminas/laminas-eventmanager 3.2.1 BSD-3-Clause Trigger and listen to events within a PHP application
laminas/laminas-feed 2.12.2 BSD-3-Clause provides functionality for consuming RSS and Atom feeds
laminas/laminas-filter 2.9.4 BSD-3-Clause Programmatically filter and normalize data and files
laminas/laminas-form 2.15.0 BSD-3-Clause Validate and display simple and complex forms, casting forms to business objects and vice versa
laminas/laminas-http 2.12.0 BSD-3-Clause Provides an easy interface for performing Hyper-Text Transfer Protocol (HTTP) requests
laminas/laminas-hydrator 2.4.2 BSD-3-Clause Serialize objects to arrays, and vice versa
laminas/laminas-i18n 2.10.3 BSD-3-Clause Provide translations for your application, and filter and validate internationalized values
laminas/laminas-inputfilter 2.10.1 BSD-3-Clause Normalize and validate input sets from the web, APIs, the CLI, and more, including files
laminas/laminas-json 2.6.1 BSD-3-Clause provides convenience methods for serializing native PHP to JSON and decoding JSON to native PHP
laminas/laminas-loader 2.6.1 BSD-3-Clause Autoloading and plugin loading strategies
laminas/laminas-log 2.12.0 BSD-3-Clause Robust, composite logger with filtering, formatting, and PSR-3 support
laminas/laminas-mail 2.11.0 BSD-3-Clause Provides generalized functionality to compose and send both text and MIME-compliant multipart e-mail messages
laminas/laminas-math 2.7.1 BSD-3-Clause  
laminas/laminas-mime 2.7.4 BSD-3-Clause Create and parse MIME messages and parts
laminas/laminas-modulemanager 2.8.4 BSD-3-Clause Modular application system for laminas-mvc applications
laminas/laminas-mvc 2.7.15 BSD-3-Clause  
laminas/laminas-psr7bridge 0.2.2 BSD-3-Clause PSR-7 <-> Laminas\Http bridge
laminas/laminas-serializer 2.9.1 BSD-3-Clause Serialize and deserialize PHP structures to a variety of representations
laminas/laminas-server 2.8.1 BSD-3-Clause Create Reflection-based RPC servers
laminas/laminas-servicemanager 2.7.11 BSD-3-Clause  
laminas/laminas-session 2.9.3 BSD-3-Clause Object-oriented interface to PHP sessions and storage
laminas/laminas-soap 2.8.0 BSD-3-Clause  
laminas/laminas-stdlib 3.2.1 BSD-3-Clause SPL extensions, array utilities, error handlers, and more
laminas/laminas-text 2.7.1 BSD-3-Clause Create FIGlets and text-based tables
laminas/laminas-uri 2.7.1 BSD-3-Clause A component that aids in manipulating and validating » Uniform Resource Identifiers (URIs)
laminas/laminas-validator 2.13.4 BSD-3-Clause Validation classes for a wide range of domains, and the ability to chain validators to create complex validation criteria
laminas/laminas-view 2.11.4 BSD-3-Clause Flexible view layer supporting and providing multiple view layers, helpers, and more
laminas/laminas-zendframework-bridge 1.0.4 BSD-3-Clause Alias legacy ZF class names to Laminas Project equivalents.
monolog/monolog 1.25.4 MIT Sends your logs to files, sockets, inboxes, databases and various web services
paragonie/random_compat v9.99.99 MIT PHP 5.x polyfill for random_bytes() and random_int() from PHP 7
paragonie/sodium_compat v1.13.0 ISC Pure PHP implementation of libsodium; uses the PHP extension if it exists
pelago/emogrifier v3.1.0 MIT Converts CSS styles into inline style attributes in your HTML code
php-amqplib/php-amqplib v2.10.1 LGPL-2.1-or-later Formerly videlalvaro/php-amqplib. This library is a pure PHP implementation of the AMQP protocol. It’s been tested against RabbitMQ.
phpseclib/mcrypt_compat 1.0.8 MIT PHP 7.1 polyfill for the mcrypt extension from PHP <= 7.0
phpseclib/phpseclib 2.0.28 MIT PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.
psr/container 1.0.0 MIT Common Container Interface (PHP FIG PSR-11)
psr/http-message 1.0.1 MIT Common interface for HTTP messages
psr/log 1.1.3 MIT Common interface for logging libraries
ralouphie/getallheaders 3.0.3 MIT A polyfill for getallheaders.
ramsey/uuid 3.8.0 MIT Formerly rhumsaa/uuid. A PHP 5.4+ library for generating RFC 4122 version 1, 3, 4, and 5 universally unique identifiers (UUID).
react/promise v2.8.0 MIT A lightweight implementation of CommonJS Promises/A for PHP
seld/jsonlint 1.8.0 MIT JSON Linter
seld/phar-utils 1.1.1 MIT PHAR file format utilities, for when PHP phars you up
symfony/console v4.4.10 MIT Symfony Console Component
symfony/css-selector v5.1.2 MIT Symfony CssSelector Component
symfony/event-dispatcher v4.4.10 MIT Symfony EventDispatcher Component
symfony/event-dispatcher-contracts v1.1.9 MIT Generic abstractions related to dispatching event
symfony/filesystem v5.1.2 MIT Symfony Filesystem Component
symfony/finder v5.1.2 MIT Symfony Finder Component
symfony/polyfill-ctype v1.18.0 MIT Symfony polyfill for ctype functions
symfony/polyfill-intl-idn v1.18.0 MIT Symfony polyfill for intl’s idn_to_ascii and idn_to_utf8 functions
symfony/polyfill-intl-normalizer v1.18.0 MIT Symfony polyfill for intl’s Normalizer class and related functions
symfony/polyfill-mbstring v1.18.0 MIT Symfony polyfill for the Mbstring extension
symfony/polyfill-php70 v1.18.0 MIT Symfony polyfill backporting some PHP 7.0+ features to lower PHP versions
symfony/polyfill-php72 v1.18.0 MIT Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
symfony/polyfill-php73 v1.18.0 MIT Symfony polyfill backporting some PHP 7.3+ features to lower PHP versions
symfony/polyfill-php80 v1.18.0 MIT Symfony polyfill backporting some PHP 8.0+ features to lower PHP versions
symfony/process v4.4.10 MIT Symfony Process Component
symfony/service-contracts v2.1.3 MIT Generic abstractions related to writing services
tedivm/jshrink v1.3.3 BSD-3-Clause Javascript Minifier built in PHP
true/punycode v2.1.1 MIT A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)
tubalmartin/cssmin v4.1.1 BSD-3-Clause A PHP port of the YUI CSS compressor
webonyx/graphql-php v0.13.9 MIT A PHP port of GraphQL reference implementation
wikimedia/less.php 1.8.2 Apache-2.0 PHP port of the Javascript version of LESS http://lesscss.org (Originally maintained by Josh Schmidt)

Supported packages for development

Name Version License Description
allure-framework/allure-codeception 1.4.3 Apache-2.0 A Codeception adapter for Allure report.
allure-framework/allure-php-api 1.1.8 Apache-2.0 PHP API for Allure adapter
allure-framework/allure-phpunit 1.2.4 Apache-2.0 A PHPUnit adapter for Allure report.
aws/aws-sdk-php 3.147.0 Apache-2.0 AWS SDK for PHP - Use Amazon Web Services in your PHP project
beberlei/assert v3.2.7 BSD-2-Clause Thin assertion library for input validation in business models.
behat/gherkin v4.6.2 MIT Gherkin DSL parser for PHP 5.3
cache/cache 0.4.0 MIT Library of all the php-cache adapters
codeception/codeception 4.1.6 MIT BDD-style testing framework
codeception/lib-asserts 1.12.0 MIT Assertion methods used by Codeception core and Asserts module
codeception/module-asserts 1.2.1 MIT Codeception module containing various assertions
codeception/module-sequence 1.0.0 MIT Sequence module for Codeception
codeception/module-webdriver 1.1.0 MIT WebDriver module for Codeception
codeception/phpunit-wrapper 9.0.2 MIT PHPUnit classes used by Codeception
codeception/stub 3.7.0 MIT Flexible Stub wrapper for PHPUnit’s Mock Builder
csharpru/vault-php 3.5.3 MIT Best Vault client for PHP that you can find
csharpru/vault-php-guzzle6-transport 2.0.4 MIT Guzzle6 transport for Vault PHP client
dealerdirect/phpcodesniffer-composer-installer v0.5.0 MIT PHP_CodeSniffer Standards Composer Installer Plugin
doctrine/annotations 1.10.3 MIT Docblock Annotations Parser
doctrine/cache 1.10.2 MIT PHP Doctrine Cache library is a popular cache implementation that supports many different drivers such as redis, memcache, apc, mongodb and others.
doctrine/inflector v1.1.0 MIT Common String Manipulations with regard to casing and singular/plural rules.
doctrine/instantiator 1.3.1 MIT A small, lightweight utility to instantiate objects in PHP without invoking their constructors
doctrine/lexer 1.2.1 MIT PHP Doctrine Lexer parser library that can be used in Top-Down, Recursive Descent Parsers.
friendsofphp/php-cs-fixer v2.16.4 MIT A tool to automatically fix PHP code style
jms/metadata 1.7.0 MIT Class/method/property metadata management in PHP
jms/parser-lib 1.0.0 Apache2 A library for easily creating recursive-descent parsers.
jms/serializer 1.14.1 MIT Library for (de-)serializing data of any complexity; supports XML, JSON, and YAML.
league/flysystem 1.0.69 MIT Filesystem abstraction: Many filesystems, one API.
lusitanian/oauth v0.8.11 MIT PHP 5.3+ oAuth 1/2 Library
mikey179/vfsstream v1.6.8 BSD-3-Clause Virtual file system to mock the real file system in unit tests.
mtdowling/jmespath.php 2.5.0 MIT Declaratively specify how to extract elements from a JSON document
mustache/mustache v2.13.0 MIT A Mustache implementation in PHP.
myclabs/deep-copy 1.10.1 MIT Create deep copies (clones) of your objects
paragonie/constant_time_encoding v2.3.0 MIT Constant-time Implementations of RFC 4648 Encoding (Base-64, Base-32, Base-16)
pdepend/pdepend 2.7.1 BSD-3-Clause Official version of pdepend to be handled with Composer
phar-io/manifest 1.0.3 BSD-3-Clause Component for reading phar.io manifest information from a PHP Archive (PHAR)
phar-io/version 2.0.1 BSD-3-Clause Library for handling version information and constraints
php-cs-fixer/diff v1.3.0 BSD-3-Clause sebastian/diff v2 backport support for PHP5.6
php-webdriver/webdriver 1.8.2 MIT A PHP client for Selenium WebDriver. Previously facebook/webdriver.
phpcollection/phpcollection 0.5.0 Apache2 General-Purpose Collection Library for PHP
phpcompatibility/php-compatibility 9.3.5 LGPL-3.0-or-later A set of sniffs for PHP_CodeSniffer that checks for PHP cross-version compatibility.
phpdocumentor/reflection-common 2.2.0 MIT Common reflection classes used by phpdocumentor to reflect the code structure
phpdocumentor/reflection-docblock 5.1.0 MIT With this component, a library can provide support for annotations via DocBlocks or otherwise retrieve information that is embedded in a DocBlock.
phpdocumentor/type-resolver 1.3.0 MIT A PSR-5 based resolver of Class names, Types and Structural Element Names
phpmd/phpmd 2.8.2 BSD-3-Clause PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD.
phpoption/phpoption 1.7.4 Apache-2.0 Option Type for PHP
phpspec/prophecy 1.11.1 MIT Highly opinionated mocking framework for PHP 5.3+
phpstan/phpstan 0.12.23 MIT PHPStan - PHP Static Analysis Tool
phpunit/php-code-coverage 8.0.2 BSD-3-Clause Library that provides collection, processing, and rendering functionality for PHP code coverage information.
phpunit/php-file-iterator 3.0.4 BSD-3-Clause FilterIterator implementation that filters files based on a list of suffixes.
phpunit/php-invoker 3.0.2 BSD-3-Clause Invoke callables with a timeout
phpunit/php-text-template 2.0.2 BSD-3-Clause Simple template engine.
phpunit/php-timer 3.1.4 BSD-3-Clause Utility class for timing
phpunit/php-token-stream 4.0.3 BSD-3-Clause Wrapper around PHP’s tokenizer extension.
phpunit/phpunit 9.1.5 BSD-3-Clause The PHP Unit Testing framework.
psr/cache 1.0.1 MIT Common interface for caching libraries
psr/simple-cache 1.0.1 MIT Common interfaces for simple caching
sebastian/code-unit 1.0.5 BSD-3-Clause Collection of value objects that represent the PHP code units
sebastian/code-unit-reverse-lookup 2.0.2 BSD-3-Clause Looks up which function or method a line of code belongs to
sebastian/comparator 4.0.3 BSD-3-Clause Provides the functionality to compare PHP values for equality
sebastian/diff 4.0.2 BSD-3-Clause Diff implementation
sebastian/environment 5.1.2 BSD-3-Clause Provides functionality to handle HHVM/PHP environments
sebastian/exporter 4.0.2 BSD-3-Clause Provides the functionality to export PHP variables for visualization
sebastian/finder-facade 2.0.0 BSD-3-Clause FinderFacade is a convenience wrapper for Symfony’s Finder component.
sebastian/global-state 4.0.0 BSD-3-Clause Snapshotting of global state
sebastian/object-enumerator 4.0.2 BSD-3-Clause Traverses array structures and object graphs to enumerate all referenced objects
sebastian/object-reflector 2.0.2 BSD-3-Clause Allows reflection of object attributes, including inherited and non-public ones
sebastian/phpcpd 5.0.2 BSD-3-Clause Copy/Paste Detector (CPD) for PHP code.
sebastian/recursion-context 4.0.2 BSD-3-Clause Provides functionality to recursively process PHP variables
sebastian/resource-operations 3.0.2 BSD-3-Clause Provides a list of PHP built-in functions that operate on resources
sebastian/type 2.2.1 BSD-3-Clause Collection of value objects that represent the types of the PHP type system
sebastian/version 3.0.1 BSD-3-Clause Library that helps with managing the version number of Git-hosted PHP projects
spomky-labs/otphp v10.0.1 MIT A PHP library for generating one time passwords according to RFC 4226 (HOTP Algorithm) and the RFC 6238 (TOTP Algorithm) and compatible with Google Authenticator
squizlabs/php_codesniffer 3.5.5 BSD-3-Clause PHP_CodeSniffer tokenizes PHP, JavaScript and CSS files and detects violations of a defined set of coding standards.
symfony/config v5.1.2 MIT Symfony Config Component
symfony/dependency-injection v5.1.2 MIT Symfony DependencyInjection Component
symfony/deprecation-contracts v2.1.3 MIT A generic function and convention to trigger deprecation notices
symfony/http-foundation v5.1.2 MIT Symfony HttpFoundation Component
symfony/mime v5.1.2 MIT A library to manipulate MIME messages
symfony/options-resolver v5.1.2 MIT Symfony OptionsResolver Component
symfony/stopwatch v5.1.2 MIT Symfony Stopwatch Component
symfony/yaml v5.1.2 MIT Symfony Yaml Component
thecodingmachine/safe v1.1.3 MIT PHP core functions that throw exceptions instead of returning FALSE on error
theseer/fdomdocument 1.6.6 BSD-3-Clause The classes contained within this repository extend the standard DOM to use exceptions at all occasions of errors instead of PHP warnings or notices. They also add various custom methods and shortcuts for convenience and to simplify the usage of DOM.
theseer/tokenizer 1.2.0 BSD-3-Clause A small library for converting tokenized PHP source code into XML and potentially other formats
vlucas/phpdotenv v2.6.6 BSD-3-Clause Loads environment variables from .env to getenv(), $_ENV and $_SERVER automagically.
webmozart/assert 1.9.1 MIT Assertions to validate method input/output with nice error messages.
weew/helpers-array v1.3.1 MIT Useful collection of php array helpers.