Composer 使用说明

root@~:# composer
   ______
  / ____/___  ____ ___  ____  ____  ________  _____
 / /   / __ \/ __ `__ \/ __ \/ __ \/ ___/ _ \/ ___/
/ /___/ /_/ / / / / / / /_/ / /_/ (__  )  __/ /
\____/\____/_/ /_/ /_/ .___/\____/____/\___/_/
                    /_/
Composer version 2.3.5 2022-04-13 16:43:00

Usage:
  command [options] [arguments]

Options:
  -h, --help                     Display help for the given command. When no command is given display help for the list command
  -q, --quiet                    Do not output any message
  -V, --version                  Display this application version
      --ansi|--no-ansi           Force (or disable --no-ansi) ANSI output
  -n, --no-interaction           Do not ask any interactive question
      --profile                  Display timing and memory usage information
      --no-plugins               Whether to disable plugins.
      --no-scripts               Skips the execution of all scripts defined in composer.json file.
  -d, --working-dir=WORKING-DIR  If specified, use the given directory as working directory.
      --no-cache                 Prevent use of the cache
  -v|vv|vvv, --verbose           Increase the verbosity of messages: 1 for normal output, 2 for more verbose output and 3 for debug

Available commands:
  about                Shows a short information about Composer.
  archive              Creates an archive of this composer package.
  browse               [home] Opens the package's repository URL or homepage in your browser.
  check-platform-reqs  Check that platform requirements are satisfied.
  clear-cache          [clearcache|cc] Clears composer's internal package cache.
  completion           Dump the shell completion script
  config               Sets config options.
  create-project       Creates new project from a package into given directory.
  depends              [why] Shows which packages cause the given package to be installed.
  diagnose             Diagnoses the system to identify common errors.
  dump-autoload        [dumpautoload] Dumps the autoloader.
  exec                 Executes a vendored binary/script.
  fund                 Discover how to help fund the maintenance of your dependencies.
  global               Allows running commands in the global composer dir ($COMPOSER_HOME).
  help                 Display help for a command
  init                 Creates a basic composer.json file in current directory.
  install              [i] Installs the project dependencies from the composer.lock file if present, or falls back on the composer.json.
  licenses             Shows information about licenses of dependencies.
  list                 List commands
  outdated             Shows a list of installed packages that have updates available, including their latest version.
  prohibits            [why-not] Shows which packages prevent the given package from being installed.
  reinstall            Uninstalls and reinstalls the given package names
  remove               Removes a package from the require or require-dev.
  require              Adds required packages to your composer.json and installs them.
  run-script           [run] Runs the scripts defined in composer.json.
  search               Searches for packages.
  self-update          [selfupdate] Updates composer.phar to the latest version.
  show                 [info] Shows information about packages.
  status               Shows a list of locally modified packages.
  suggests             Shows package suggestions.
  update               [u|upgrade] Updates your dependencies to the latest version according to composer.json, and updates the composer.lock file.
  validate             Validates a composer.json and composer.lock.
root@~:#

root@~:# ls -l /root/.composer
total 1976
-rw-r--r-- 1 root root 1993462 May  9 16:52 2022-04-13_16-39-56-1.10.26-old.phar
-rw------- 1 root root     207 May  9 16:41 auth.json
drwxr-xr-x 4 root root      48 May  6 10:44 cache
-rw-r--r-- 1 root root      26 Aug  2 21:57 composer.json
-rw-r--r-- 1 root root     571 Aug  2 21:57 composer.lock
-rw------- 1 root root      50 Aug  2 21:49 config.json
-rw-r--r-- 1 root root     799 May  9 16:13 keys.dev.pub
-rw-r--r-- 1 root root     799 May  9 16:13 keys.tags.pub
-rw-r--r-- 1 root root       7 May  9 16:52 update-channel
drwxr-xr-x 4 root root      53 Aug  2 21:57 vendor
root@~:#

root@~:# composer show -h
Description:
  Shows information about packages.

Usage:
  show [options] [--] [<package> [<version>]]
  info

Arguments:
  package                                        Package to inspect. Or a name including a wildcard (*) to filter lists of packages instead.
  version                                        Version or version constraint to inspect

Options:
      --all                                      List all packages
      --locked                                   List all locked packages
  -i, --installed                                List installed packages only (enabled by default, only present for BC).
  -p, --platform                                 List platform packages only
  -a, --available                                List available packages only
  -s, --self                                     Show the root package information
  -N, --name-only                                List package names only
  -P, --path                                     Show package paths
  -t, --tree                                     List the dependencies as a tree
  -l, --latest                                   Show the latest version
  -o, --outdated                                 Show the latest version but only for packages that are outdated
      --ignore=IGNORE                            Ignore specified package(s). Use it with the --outdated option if you don't want to be informed about new versions of some packages. (multiple values allowed)
  -m, --minor-only                               Show only packages that have minor SemVer-compatible updates. Use with the --outdated option.
      --patch-only                               Show only packages that have patch SemVer-compatible updates. Use with the --outdated option.
  -D, --direct                                   Shows only packages that are directly required by the root package
      --strict                                   Return a non-zero exit code when there are outdated packages
  -f, --format=FORMAT                            Format of the output: text or json [default: "text"]
      --no-dev                                   Disables search in require-dev packages.
      --ignore-platform-req=IGNORE-PLATFORM-REQ  Ignore a specific platform requirement (php & ext- packages). Use with the --outdated option (multiple values allowed)
      --ignore-platform-reqs                     Ignore all platform requirements (php & ext- packages). Use with the --outdated option
  -h, --help                                     Display help for the given command. When no command is given display help for the list command
  -q, --quiet                                    Do not output any message
  -V, --version                                  Display this application version
      --ansi|--no-ansi                           Force (or disable --no-ansi) ANSI output
  -n, --no-interaction                           Do not ask any interactive question
      --profile                                  Display timing and memory usage information
      --no-plugins                               Whether to disable plugins.
      --no-scripts                               Skips the execution of all scripts defined in composer.json file.
  -d, --working-dir=WORKING-DIR                  If specified, use the given directory as working directory.
      --no-cache                                 Prevent use of the cache
  -v|vv|vvv, --verbose                           Increase the verbosity of messages: 1 for normal output, 2 for more verbose output and 3 for debug

Help:
  The show command displays detailed information about a package, or
  lists all packages available.

  Read more at https://getcomposer.org/doc/03-cli.md#show
root@~:#

root@~:# composer create-project -h
Description:
  Creates new project from a package into given directory.

Usage:
  create-project [options] [--] [<package> [<directory> [<version>]]]

Arguments:
  package                                        Package name to be installed
  directory                                      Directory where the files should be created
  version                                        Version, will default to latest

Options:
  -s, --stability=STABILITY                      Minimum-stability allowed (unless a version is specified).
      --prefer-source                            Forces installation from package sources when possible, including VCS information.
      --prefer-dist                              Forces installation from package dist (default behavior).
      --prefer-install=PREFER-INSTALL            Forces installation from package dist|source|auto (auto chooses source for dev versions, dist for the rest).
      --repository=REPOSITORY                    Add custom repositories to look the package up, either by URL or using JSON arrays (multiple values allowed)
      --repository-url=REPOSITORY-URL            DEPRECATED: Use --repository instead.
      --add-repository                           Add the custom repository in the composer.json. If a lock file is present it will be deleted and an update will be run instead of install.
      --dev                                      Enables installation of require-dev packages (enabled by default, only present for BC).
      --no-dev                                   Disables installation of require-dev packages.
      --no-custom-installers                     DEPRECATED: Use no-plugins instead.
      --no-scripts                               Skips the execution of all scripts defined in composer.json file.
      --no-progress                              Do not output download progress.
      --no-secure-http                           Disable the secure-http config option temporarily while installing the root package. Use at your own risk. Using this flag is a bad idea.
      --keep-vcs                                 Whether to prevent deleting the vcs folder.
      --remove-vcs                               Whether to force deletion of the vcs folder without prompting.
      --no-install                               Whether to skip installation of the package dependencies.
      --ignore-platform-req=IGNORE-PLATFORM-REQ  Ignore a specific platform requirement (php & ext- packages). (multiple values allowed)
      --ignore-platform-reqs                     Ignore all platform requirements (php & ext- packages).
      --ask                                      Whether to ask for project directory.
  -h, --help                                     Display help for the given command. When no command is given display help for the list command
  -q, --quiet                                    Do not output any message
  -V, --version                                  Display this application version
      --ansi|--no-ansi                           Force (or disable --no-ansi) ANSI output
  -n, --no-interaction                           Do not ask any interactive question
      --profile                                  Display timing and memory usage information
      --no-plugins                               Whether to disable plugins.
  -d, --working-dir=WORKING-DIR                  If specified, use the given directory as working directory.
      --no-cache                                 Prevent use of the cache
  -v|vv|vvv, --verbose                           Increase the verbosity of messages: 1 for normal output, 2 for more verbose output and 3 for debug

Help:
  The create-project command creates a new project from a given
  package into a new directory. If executed without params and in a directory
  with a composer.json file it installs the packages for the current project.

  You can use this command to bootstrap new projects or setup a clean
  version-controlled installation for developers of your project.

  php composer.phar create-project vendor/project target-directory [version]

  You can also specify the version with the package name using = or : as separator.

  php composer.phar create-project vendor/project:version target-directory

  To install unstable packages, either specify the version you want, or use the
  --stability=dev (where dev can be one of RC, beta, alpha or dev).

  To setup a developer workable version you should create the project using the source
  controlled code by appending the '--prefer-source' flag.

  To install a package from another repository than the default one you
  can pass the '--repository=https://myrepository.org' flag.

  Read more at https://getcomposer.org/doc/03-cli.md#create-project
root@~:#

>  composer create-project --prefer-dist yiisoft/yii2-app-advanced=2.0.45 yii2_220929

{
    "require": {
        "php": ">=7.0.0",
        "yiisoft/yii2": "~2.0.15",
        "nmred/kafka-php": "0.2.*",
        "peachpear/pear-leaf": "1.0.*"
    }
}

主版本号：当你做了不兼容的 API 修改，
次版本号：当你做了向下兼容的功能性新增，
修订号：当你做了向下兼容的问题修正。

~表示版本号只能改变最末尾那段（如果是 ~x.y 末尾就是 y，如果是 ~x.y.z 末尾就是 z）
~1.2.3 代表 1.2.3 <= 版本号 < 1.3.0
~1.2   代表  1.2 <= 版本号 <2.0

^表示除了大版本号以外，小版本号和补丁版本号都可以变
^1.2.3 代表 1.2.3 <= 版本号 < 2.0.0

特殊情况0开头的版本号：
^0.3.0 等于 0.3.0 <= 版本号 <0.4.0  注意：不是 <1.0.0
因为：semantic versioning 的规定是，大版本号以 0 开头表示这是一个非稳定版本（unstable），
如果处于非稳定状态，小版本号是允许不向下兼容的，

所以如果你要指定 0 开头的库那一定要注意：
危险写法：~0.1 等于 0.1.0 <= 版本号 <1.0.0
保险写法：^0.1 等于 0.1.0 <= 版本号 <0.2.0

root@02891538d8c9:/var/www/html/test# composer init
The "fxp/composer-asset-plugin" plugin was skipped because it requires a Plugin API version ("^1.0") that 
does not match your Composer installation ("2.3.0"). You may need to run composer update with the "--no-plugins" option.


  Welcome to the Composer config generator



This command will guide you through creating your composer.json config.

Package name (<vendor>/<name>) [root/test]: test/test
Description []: test
Author [n to skip]: test
Minimum Stability []: 0.0.1
Invalid minimum stability "0.0.1". Must be empty or one of: stable, RC, beta, alpha, dev
Minimum Stability []: dev
Package Type (e.g. library, project, metapackage, composer-plugin) []: project
License []: PSL

Define your dependencies.

Would you like to define your dependencies (require) interactively [yes]? no
Would you like to define your dev dependencies (require-dev) interactively [yes]? no
Add PSR-4 autoload mapping? Maps namespace "Test\Test" to the entered relative path. [src/, n to skip]: yes
The src folder name "yes" is invalid. Please add a relative path with tailing forward slash. [A-Za-z0-9_-/]+/
Add PSR-4 autoload mapping? Maps namespace "Test\Test" to the entered relative path. [src/, n to skip]: src/

{
    "name": "test/test",
    "description": "test",
    "type": "project",
    "license": "PSL",
    "autoload": {
        "psr-4": {
            "Test\\Test\\": "src/"
        }
    },
    "authors": [
        {
            "name": "test"
        }
    ],
    "minimum-stability": "dev",
    "require": {}
}

Do you confirm generation [yes]? yes
The "fxp/composer-asset-plugin" plugin (installed globally) was skipped because it 
requires a Plugin API version ("^1.0") that does not match your Composer installation ("2.3.0"). 
You may need to run composer update with the "--no-plugins" option.
Generating autoload files
Generated autoload files
PSR-4 autoloading configured. Use "namespace Test\Test;" in src/
Include the Composer autoloader with: require 'vendor/autoload.php';
root@02891538d8c9:/var/www/html/test#
root@02891538d8c9:/var/www/html/test#

composer create-project --prefer-dist yiisoft/yii2-app-basic blog

Failed to download yiisoft/yii2-gii from dist: The zip extension and unzip command are both missing, skipping.
Your command-line PHP is using multiple ini files. Run `php --ini` to show them.

composer require --dev phpunit/phpunit

composer install --no-dev

"require": {
    "php": ">=7.3",
    "ext-swoole": ">=4.4"
},
"require-dev": {
    "phpunit/phpunit": "^8.5.8|^9.3.3",
    "swoole/ide-helper": "^4.6",
    "phpmd/phpmd": "^2.6"
}

composer update yiisoft/yii2-composer --no-plugins

"autoload": {
    "psr-4": {
        "App\\": "./app/"
    }
}

spl_autoload_register(function ($class_name){
    $file_name = database_path("seeds/{Sclass_name}.php");
    if (is_file($file_name)){
        require_once $file_name;
    )
)};

    "repositories": {
        "packagist": {
            "type": "composer",
            "url": "https://mirrors.aliyun.com/composer/"
        }
    }

    "repositories": [
        {
            "type": "git",
            "url": "https://gitee.com/fastadminnet/framework.git"
        },
        {
            "type": "git",
            "url": "https://gitee.com/fastadminnet/think-captcha.git"
        }
    ]

root@02891538d8c9:/var/www/html/fastadmin# composer install --no-plugins --optimize-autoloader --no-dev
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information

In Git.php line 470:

  Failed to clone https://gitee.com/fastadminnet/framework.git, git was not found, check that it is installed and in your PATH env.

  sh: 1: git: not found


install [--prefer-source] [--prefer-dist] [--prefer-install PREFER-INSTALL] [--dry-run] [--download-only] [--dev] [--no-suggest] [--no-dev] [--no-autoloader] [--no-progress] [--no-install] [--audit] [--audit-format AUDIT-FORMAT] [-v|vv|vvv|                            --verbose] [-o|--optimize-autoloader] [-a|--classmap-authoritative] [--apcu-auto                            loader] [--apcu-autoloader-prefix APCU-AUTOLOADER-PREFIX] [--ignore-platform-req IGNORE-PLATFORM-REQ] [--ignore-platform-reqs] [--] [<packages>...]

root@02891538d8c9:/var/www/html/fastadmin# git --version
bash: git: command not found
root@02891538d8c9:/var/www/html/fastadmin#

// 全局安装
composer global require "fxp/composer-asset-plugin"
 
// 或者项目内引入
composer require --dev "fxp/composer-asset-plugin"

Package fxp/composer-asset-plugin has a PHP requirement incompatible with your PHP

v1.4.6 2019-08-08 18:36 UTC

Requires
    php: >=5.3.3
    composer-plugin-api: ^1.0

Requires (Dev)
    composer/composer: ^1.6.0

[root@BaiYang-PC src]# rm -f /usr/local/bin/composer

[root@BaiYang-PC src]#
[root@BaiYang-PC src]# php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
[root@BaiYang-PC src]# php composer-setup.php --version=1.6.5
All settings correct for using Composer
Downloading...

Composer (version 1.6.5) successfully installed to: /usr/local/src/composer.phar
Use it: php composer.phar

[root@BaiYang-PC src]#
[root@BaiYang-PC src]#
[root@BaiYang-PC src]# mv composer.phar /usr/local/bin/composer
[root@BaiYang-PC src]#

[root@BaiYang-PC src]# composer global require "fxp/composer-asset-plugin:~1.4"
Changed current directory to /root/.composer
Warning from https://packagist.org: Support for Composer 1 is deprecated and some packages will not be available. 
You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/



^C
[root@BaiYang-PC src]#

[root@BaiYang-PC src]# composer self-update

您可能希望通过本地 Bower/NPM 客户端管理您的 assets，使用 CDN 或完全避免 assets 的安装。 
为了防止通过 Composer 安装 assets，请将以下几行添加到您的 'composer.json' 中：

"replace": {
    "bower-asset/jquery": ">=1.11.0",
    "bower-asset/inputmask": ">=3.2.0",
    "bower-asset/punycode": ">=1.3.0",
    "bower-asset/yii2-pjax": ">=2.0.0"
},

root@02891538d8c9:/usr/local/src# composer global require "fxp/composer-asset-plugin"
Changed current directory to /root/.composer
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Info from https://repo.packagist.org: #StandWithUkraine
Using version ^1.4 for fxp/composer-asset-plugin
./composer.json has been updated
Loading composer repositories with package information
Warning from https://repo.packagist.org: Support for Composer 1 is deprecated and some packages will not be available. You should upgrade to Composer 2. See https://blog.packagist.com/deprecating-composer-1-support/
Info from https://repo.packagist.org: #StandWithUkraine
Updating dependencies (including require-dev)
Package operations: 1 install, 0 updates, 0 removals
  - Installing fxp/composer-asset-plugin (v1.4.6): Downloading (100%)
Writing lock file
Generating autoload files
root@02891538d8c9:/usr/local/src#
root@02891538d8c9:/usr/local/src# cd ~
root@02891538d8c9:~#
root@02891538d8c9:~# composer global remove "fxp/composer-asset-plugin"
Changed current directory to /root/.composer
The "fxp/composer-asset-plugin" plugin was skipped because it requires a Plugin API version ("^1.0") that does not match your Composer installation ("2.3.0"). You may need to run composer update with the "--no-plugins" option.
./composer.json has been updated
The "fxp/composer-asset-plugin" plugin was skipped because it requires a Plugin API version ("^1.0") that does not match your Composer installation ("2.3.0"). You may need to run composer update with the "--no-plugins" option.
Running composer update fxp/composer-asset-plugin
Loading composer repositories with package information
Updating dependencies
Lock file operations: 0 installs, 0 updates, 1 removal
  - Removing fxp/composer-asset-plugin (v1.4.6)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 0 installs, 0 updates, 1 removal
  - Removing fxp/composer-asset-plugin (v1.4.6)
Generating autoload files
root@02891538d8c9:~#

"require": {
    "bower-asset/bootstrap": "^3.3",
    "npm-asset/jquery": "^2.2"
}

"repositories": {

    {
        "type": "composer",
        "url": "https://asset-packagist.cn"
    }
}

    "2.13.0.0": {
      "uid": 1000600,
      "name": "bower-asset/moment",
      "version": "2.13.0.0",
      "type": "bower-asset",
      "dist": {
        "type": "zip",
        "url": "https://api.github.com/repos/moment/moment/zipball/d6651c21c6131fbb5db891b60971357739015688",
        "reference": "d6651c21c6131fbb5db891b60971357739015688"
      },
      "source": {
        "type": "git",
        "url": "https://github.com/moment/moment.git",
        "reference": "d6651c21c6131fbb5db891b60971357739015688"
      }
    },

    "require": {
        "oomphinc/composer-installers-extender": "^1.1",
        "bower-asset/bootstrap": "^3.3",
        "npm-asset/jquery": "^2.2"
    },
    "extra": {
        "installer-types": ["bower-asset", "npm-asset"],
        "installer-paths": {
            "public/assets/{$vendor}/{$name}/": ["type:bower-asset", "type:npm-asset"]
        }
    },
    "repositories": [
        {
            "type": "composer",
            "url": "https://asset-packagist.cn"
        }
    ]

    $config = [
        ...
        'aliases' => [
            '@bower' => '@vendor/bower-asset',
            '@npm'   => '@vendor/npm-asset',
        ],
        ...
    ];

    "config": {
        "fxp-asset": {
            "enabled": false
        }
    }