PHP and Composer Support Is Now in Beta
Brief
Today, Socket’s PHP and Composer support is moving from Experimental to Beta and is now enabled for all customers. PHP reachability analysis is also generally available, helping teams determine which vulnerabilities in their dependencies can be reached from their application code.
We introduced PHP and Composer support earlier this year with package search, dependency scanning, SBOM generation, CVE detection, and AI-powered analysis for Packagist packages. Moving to Beta makes that protection available across every customer organization without requiring Experimental access.
Socket Research Has Tracked Attacks Across the PHP Ecosystem #
Since launching PHP support and beginning continuous scanning of Packagist, the Socket Threat Research team has identified malicious packages, compromised repositories, and campaigns moving into PHP from other ecosystems.