Magento Commerce packages
The Magento application uses Composer to manage PHP packages.
The composer.json file declares the list of packages, whereas the composer.lock file stores a complete list of the packages (a full version of each package and its dependencies) used to build a release version of the Magento application. The following tables list packages from the composer.lock file for Magento Commerce 2.3.
Magento packages
This section contains information about the magento dependencies for the latest Magento Commerce 2.3 release.
Click the Name links to view the repository and the license agreement.
Required packages
| Name | Version | License | Description |
|---|---|---|---|
| magento/composer | 1.5.1 | OSL-3.0AFL-3.0 | Magento composer library helps to instantiate Composer application and run composer commands. |
| magento/magento-composer-installer | 0.1.13 | OSL-3.0 | Composer installer for Magento modules |
| magento/zendframework1 | 1.14.3 | BSD-3-Clause | Magento Zend Framework 1 |
Supported packages for development
| Name | Version | License | Description |
|---|---|---|---|
| magento/magento-coding-standard | 5 | OSL-3.0AFL-3.0 | A set of Magento specific PHP CodeSniffer rules. |
| magento/magento2-functional-testing-framework | 2.6.4 | AGPL-3.0 | Magento2 Functional Testing Framework |
Third party packages
This section contains information about third party packages for the latest Magento Commerce 2.3 release. Click the Name links to view the repository and the license agreement.
Required packages
| Name | Version | License | Description |
|---|---|---|---|
| braintree/braintree_php | 3.35.0 | MIT | Braintree PHP Client Library |
| colinmollenhour/cache-backend-file | v1.4.5 | BSD-3-Clause | The stock Zend_Cache_Backend_File backend has extremely poor performance for cleaning by tags making it become unusable as the number of cached items increases. This backend makes many changes resulting in a huge performance boost, especially for tag cleaning. |
| colinmollenhour/cache-backend-redis | 1.10.6 | BSD-3-Clause | Zend_Cache backend using Redis with full support for tags. |
| colinmollenhour/credis | 1.10.0 | MIT | Credis is a lightweight interface to the Redis key-value store which wraps the phpredis library when available for better performance. |
| colinmollenhour/php-redis-session-abstract | v1.4.2 | BSD-3-Clause | A Redis-based session handler with optimistic locking |
| composer/ca-bundle | 1.2.7 | MIT | Lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle. |
| composer/composer | 1.10.5 | MIT | Composer helps you declare, manage and install dependencies of PHP projects. It ensures you have the right stack everywhere. |
| composer/semver | 1.5.1 | MIT | Semver library that offers utilities, version constraint parsing and validation. |
| composer/spdx-licenses | 1.5.3 | MIT | SPDX licenses list and validation library. |
| composer/xdebug-handler | 1.4.1 | MIT | Restarts a process without Xdebug. |
| container-interop/container-interop | 1.2.0 | MIT | Promoting the interoperability of container objects (DIC, SL, etc.) |
| elasticsearch/elasticsearch | v7.6.1 | Apache-2.0 | PHP Client for Elasticsearch |
| ezimuel/guzzlestreams | 3.0.1 | MIT | Fork of guzzle/streams (abandoned) to be used with elasticsearch-php |
| ezimuel/ringphp | 1.1.2 | MIT | Fork of guzzle/RingPHP (abandoned) to be used with elasticsearch-php |
| guzzlehttp/guzzle | 6.5.2 | MIT | Guzzle is a PHP HTTP client library |
| guzzlehttp/promises | v1.3.1 | MIT | Guzzle promises library |
| guzzlehttp/psr7 | 1.6.1 | MIT | PSR-7 message implementation that also provides common utility methods |
| justinrainbow/json-schema | 5.2.9 | MIT | A library to validate a json schema. |
| laminas/laminas-captcha | 2.9.0 | BSD-3-Clause | Generate and validate CAPTCHAs using Figlets, images, ReCaptcha, and more |
| laminas/laminas-code | 3.3.2 | BSD-3-Clause | Extensions to the PHP Reflection API, static code scanning, and code generation |
| laminas/laminas-config | 2.6.0 | BSD-3-Clause | provides a nested object property based user interface for accessing this configuration data within application code |
| laminas/laminas-console | 2.8.0 | BSD-3-Clause | Build console applications using getopt syntax or routing, complete with prompts |
| laminas/laminas-crypt | 2.6.0 | BSD-3-Clause | |
| laminas/laminas-db | 2.11.3 | BSD-3-Clause | Database abstraction layer, SQL abstraction, result set abstraction, and RowDataGateway and TableDataGateway implementations |
| laminas/laminas-dependency-plugin | 1.0.3 | BSD-3-Clause | Replace zendframework and zfcampus packages with their Laminas Project equivalents. |
| laminas/laminas-di | 2.6.1 | BSD-3-Clause | |
| laminas/laminas-diactoros | 1.8.7p2 | BSD-3-Clause | PSR HTTP Message implementations |
| laminas/laminas-escaper | 2.6.1 | BSD-3-Clause | Securely and safely escape HTML, HTML attributes, JavaScript, CSS, and URLs |
| laminas/laminas-eventmanager | 3.2.1 | BSD-3-Clause | Trigger and listen to events within a PHP application |
| laminas/laminas-feed | 2.12.2 | BSD-3-Clause | provides functionality for consuming RSS and Atom feeds |
| laminas/laminas-filter | 2.9.4 | BSD-3-Clause | Programmatically filter and normalize data and files |
| laminas/laminas-form | 2.14.5 | BSD-3-Clause | Validate and display simple and complex forms, casting forms to business objects and vice versa |
| laminas/laminas-http | 2.11.2 | BSD-3-Clause | Provides an easy interface for performing Hyper-Text Transfer Protocol (HTTP) requests |
| laminas/laminas-hydrator | 2.4.2 | BSD-3-Clause | Serialize objects to arrays, and vice versa |
| laminas/laminas-i18n | 2.10.3 | BSD-3-Clause | Provide translations for your application, and filter and validate internationalized values |
| laminas/laminas-inputfilter | 2.10.1 | BSD-3-Clause | Normalize and validate input sets from the web, APIs, the CLI, and more, including files |
| laminas/laminas-json | 2.6.1 | BSD-3-Clause | provides convenience methods for serializing native PHP to JSON and decoding JSON to native PHP |
| laminas/laminas-loader | 2.6.1 | BSD-3-Clause | Autoloading and plugin loading strategies |
| laminas/laminas-log | 2.12.0 | BSD-3-Clause | Robust, composite logger with filtering, formatting, and PSR-3 support |
| laminas/laminas-mail | 2.10.0 | BSD-3-Clause | Provides generalized functionality to compose and send both text and MIME-compliant multipart e-mail messages |
| laminas/laminas-math | 2.7.1 | BSD-3-Clause | |
| laminas/laminas-mime | 2.7.4 | BSD-3-Clause | Create and parse MIME messages and parts |
| laminas/laminas-modulemanager | 2.8.4 | BSD-3-Clause | Modular application system for laminas-mvc applications |
| laminas/laminas-mvc | 2.7.15 | BSD-3-Clause | |
| laminas/laminas-psr7bridge | 0.2.2 | BSD-3-Clause | PSR-7 <-> Laminas\Http bridge |
| laminas/laminas-serializer | 2.9.1 | BSD-3-Clause | Serialize and deserialize PHP structures to a variety of representations |
| laminas/laminas-server | 2.8.1 | BSD-3-Clause | Create Reflection-based RPC servers |
| laminas/laminas-servicemanager | 2.7.11 | BSD-3-Clause | |
| laminas/laminas-session | 2.9.3 | BSD-3-Clause | Object-oriented interface to PHP sessions and storage |
| laminas/laminas-soap | 2.8.0 | BSD-3-Clause | |
| laminas/laminas-stdlib | 3.2.1 | BSD-3-Clause | SPL extensions, array utilities, error handlers, and more |
| laminas/laminas-text | 2.7.1 | BSD-3-Clause | Create FIGlets and text-based tables |
| laminas/laminas-uri | 2.7.1 | BSD-3-Clause | A component that aids in manipulating and validating » Uniform Resource Identifiers (URIs) |
| laminas/laminas-validator | 2.13.4 | BSD-3-Clause | Validation classes for a wide range of domains, and the ability to chain validators to create complex validation criteria |
| laminas/laminas-view | 2.11.4 | BSD-3-Clause | Flexible view layer supporting and providing multiple view layers, helpers, and more |
| laminas/laminas-zendframework-bridge | 1.0.3 | BSD-3-Clause | Alias legacy ZF class names to Laminas Project equivalents. |
| monolog/monolog | 1.25.3 | MIT | Sends your logs to files, sockets, inboxes, databases and various web services |
| paragonie/random_compat | v9.99.99 | MIT | PHP 5.x polyfill for random_bytes() and random_int() from PHP 7 |
| paragonie/sodium_compat | v1.13.0 | ISC | Pure PHP implementation of libsodium; uses the PHP extension if it exists |
| pelago/emogrifier | v2.2.0 | MIT | Converts CSS styles into inline style attributes in your HTML code |
| php-amqplib/php-amqplib | v2.10.1 | LGPL-2.1-or-later | Formerly videlalvaro/php-amqplib. This library is a pure PHP implementation of the AMQP protocol. It’s been tested against RabbitMQ. |
| phpseclib/mcrypt_compat | 1.0.8 | MIT | PHP 7.1 polyfill for the mcrypt extension from PHP <= 7.0 |
| phpseclib/phpseclib | 2.0.27 | MIT | PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc. |
| psr/container | 1.0.0 | MIT | Common Container Interface (PHP FIG PSR-11) |
| psr/http-message | 1.0.1 | MIT | Common interface for HTTP messages |
| psr/log | 1.1.3 | MIT | Common interface for logging libraries |
| ralouphie/getallheaders | 3.0.3 | MIT | A polyfill for getallheaders. |
| ramsey/uuid | 3.8.0 | MIT | Formerly rhumsaa/uuid. A PHP 5.4+ library for generating RFC 4122 version 1, 3, 4, and 5 universally unique identifiers (UUID). |
| react/promise | v2.7.1 | MIT | A lightweight implementation of CommonJS Promises/A for PHP |
| seld/jsonlint | 1.7.2 | MIT | JSON Linter |
| seld/phar-utils | 1.1.0 | MIT | PHAR file format utilities, for when PHP phars you up |
| symfony/console | v4.4.7 | MIT | Symfony Console Component |
| symfony/css-selector | v4.4.7 | MIT | Symfony CssSelector Component |
| symfony/event-dispatcher | v4.4.7 | MIT | Symfony EventDispatcher Component |
| symfony/event-dispatcher-contracts | v1.1.7 | MIT | Generic abstractions related to dispatching event |
| symfony/filesystem | v4.4.7 | MIT | Symfony Filesystem Component |
| symfony/finder | v4.4.7 | MIT | Symfony Finder Component |
| symfony/polyfill-ctype | v1.15.0 | MIT | Symfony polyfill for ctype functions |
| symfony/polyfill-mbstring | v1.15.0 | MIT | Symfony polyfill for the Mbstring extension |
| symfony/polyfill-php73 | v1.15.0 | MIT | Symfony polyfill backporting some PHP 7.3+ features to lower PHP versions |
| symfony/process | v4.4.7 | MIT | Symfony Process Component |
| symfony/service-contracts | v2.0.1 | MIT | Generic abstractions related to writing services |
| tedivm/jshrink | v1.3.3 | BSD-3-Clause | Javascript Minifier built in PHP |
| true/punycode | v2.1.1 | MIT | A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA) |
| tubalmartin/cssmin | v4.1.1 | BSD-3-Clause | A PHP port of the YUI CSS compressor |
| webonyx/graphql-php | v0.13.8 | MIT | A PHP port of GraphQL reference implementation |
| wikimedia/less.php | 1.8.2 | Apache-2.0 | PHP port of the Javascript version of LESS http://lesscss.org (Originally maintained by Josh Schmidt) |
Supported packages for development
| Name | Version | License | Description |
|---|---|---|---|
| allure-framework/allure-codeception | 1.3.0 | Apache-2.0 | A Codeception adapter for Allure report. |
| allure-framework/allure-php-api | 1.1.8 | Apache-2.0 | PHP API for Allure adapter |
| allure-framework/allure-phpunit | 1.2.3 | Apache-2.0 | A PHPUnit adapter for Allure report. |
| aws/aws-sdk-php | 3.134.6 | Apache-2.0 | AWS SDK for PHP - Use Amazon Web Services in your PHP project |
| behat/gherkin | v4.6.2 | MIT | Gherkin DSL parser for PHP 5.3 |
| cache/cache | 0.4.0 | MIT | Library of all the php-cache adapters |
| codeception/codeception | 2.4.5 | MIT | BDD-style testing framework |
| codeception/phpunit-wrapper | 6.8.1 | MIT | PHPUnit classes used by Codeception |
| codeception/stub | 2.1.0 | MIT | Flexible Stub wrapper for PHPUnit’s Mock Builder |
| csharpru/vault-php | 3.5.3 | MIT | Best Vault client for PHP that you can find |
| csharpru/vault-php-guzzle6-transport | 2.0.4 | MIT | Guzzle6 transport for Vault PHP client |
| dealerdirect/phpcodesniffer-composer-installer | v0.5.0 | MIT | PHP_CodeSniffer Standards Composer Installer Plugin |
| doctrine/annotations | 1.10.1 | MIT | Docblock Annotations Parser |
| doctrine/cache | 1.10.0 | MIT | PHP Doctrine Cache library is a popular cache implementation that supports many different drivers such as redis, memcache, apc, mongodb and others. |
| doctrine/inflector | v1.1.0 | MIT | Common String Manipulations with regard to casing and singular/plural rules. |
| doctrine/instantiator | 1.3.0 | MIT | A small, lightweight utility to instantiate objects in PHP without invoking their constructors |
| doctrine/lexer | 1.2.0 | MIT | PHP Doctrine Lexer parser library that can be used in Top-Down, Recursive Descent Parsers. |
| flow/jsonpath | 0.5.0 | MIT | JSONPath implementation for parsing, searching and flattening arrays |
| friendsofphp/php-cs-fixer | v2.14.6 | MIT | A tool to automatically fix PHP code style |
| fzaninotto/faker | v1.9.1 | MIT | Faker is a PHP library that generates fake data for you. |
| jms/metadata | 1.7.0 | MIT | Class/method/property metadata management in PHP |
| jms/parser-lib | 1.0.0 | Apache2 | A library for easily creating recursive-descent parsers. |
| jms/serializer | 1.14.1 | MIT | Library for (de-)serializing data of any complexity; supports XML, JSON, and YAML. |
| league/flysystem | 1.0.66 | MIT | Filesystem abstraction: Many filesystems, one API. |
| lusitanian/oauth | v0.8.11 | MIT | PHP 5.3+ oAuth 1/2 Library |
| mikey179/vfsstream | v1.6.8 | BSD-3-Clause | Virtual file system to mock the real file system in unit tests. |
| mtdowling/jmespath.php | 2.5.0 | MIT | Declaratively specify how to extract elements from a JSON document |
| mustache/mustache | v2.13.0 | MIT | A Mustache implementation in PHP. |
| myclabs/deep-copy | 1.9.5 | MIT | Create deep copies (clones) of your objects |
| pdepend/pdepend | 2.5.2 | BSD-3-Clause | Official version of pdepend to be handled with Composer |
| phar-io/manifest | 1.0.1 | BSD-3-Clause | Component for reading phar.io manifest information from a PHP Archive (PHAR) |
| phar-io/version | 1.0.1 | BSD-3-Clause | Library for handling version information and constraints |
| php-cs-fixer/diff | v1.3.0 | BSD-3-Clause | sebastian/diff v2 backport support for PHP5.6 |
| php-webdriver/webdriver | 1.8.2 | MIT | A PHP client for Selenium WebDriver. Previously facebook/webdriver. |
| phpcollection/phpcollection | 0.5.0 | Apache2 | General-Purpose Collection Library for PHP |
| phpcompatibility/php-compatibility | 9.3.5 | LGPL-3.0-or-later | A set of sniffs for PHP_CodeSniffer that checks for PHP cross-version compatibility. |
| phpdocumentor/reflection-common | 2.0.0 | MIT | Common reflection classes used by phpdocumentor to reflect the code structure |
| phpdocumentor/reflection-docblock | 5.1.0 | MIT | With this component, a library can provide support for annotations via DocBlocks or otherwise retrieve information that is embedded in a DocBlock. |
| phpdocumentor/type-resolver | 1.1.0 | MIT | A PSR-5 based resolver of Class names, Types and Structural Element Names |
| phpmd/phpmd | 2.7.0 | BSD-3-Clause | PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD. |
| phpoption/phpoption | 1.7.3 | Apache-2.0 | Option Type for PHP |
| phpspec/prophecy | v1.10.3 | MIT | Highly opinionated mocking framework for PHP 5.3+ |
| phpstan/phpstan | 0.12.18 | MIT | PHPStan - PHP Static Analysis Tool |
| phpunit/php-code-coverage | 5.3.2 | BSD-3-Clause | Library that provides collection, processing, and rendering functionality for PHP code coverage information. |
| phpunit/php-file-iterator | 1.4.5 | BSD-3-Clause | FilterIterator implementation that filters files based on a list of suffixes. |
| phpunit/php-text-template | 1.2.1 | BSD-3-Clause | Simple template engine. |
| phpunit/php-timer | 1.0.9 | BSD-3-Clause | Utility class for timing |
| phpunit/php-token-stream | 2.0.2 | BSD-3-Clause | Wrapper around PHP’s tokenizer extension. |
| phpunit/phpunit | 6.5.14 | BSD-3-Clause | The PHP Unit Testing framework. |
| phpunit/phpunit-mock-objects | 5.0.10 | BSD-3-Clause | Mock Object library for PHPUnit |
| psr/cache | 1.0.1 | MIT | Common interface for caching libraries |
| psr/simple-cache | 1.0.1 | MIT | Common interfaces for simple caching |
| sebastian/code-unit-reverse-lookup | 1.0.1 | BSD-3-Clause | Looks up which function or method a line of code belongs to |
| sebastian/comparator | 2.1.3 | BSD-3-Clause | Provides the functionality to compare PHP values for equality |
| sebastian/diff | 2.0.1 | BSD-3-Clause | Diff implementation |
| sebastian/environment | 3.1.0 | BSD-3-Clause | Provides functionality to handle HHVM/PHP environments |
| sebastian/exporter | 3.1.2 | BSD-3-Clause | Provides the functionality to export PHP variables for visualization |
| sebastian/finder-facade | 1.2.3 | BSD-3-Clause | FinderFacade is a convenience wrapper for Symfony’s Finder component. |
| sebastian/global-state | 2.0.0 | BSD-3-Clause | Snapshotting of global state |
| sebastian/object-enumerator | 3.0.3 | BSD-3-Clause | Traverses array structures and object graphs to enumerate all referenced objects |
| sebastian/object-reflector | 1.1.1 | BSD-3-Clause | Allows reflection of object attributes, including inherited and non-public ones |
| sebastian/phpcpd | 3.0.1 | BSD-3-Clause | Copy/Paste Detector (CPD) for PHP code. |
| sebastian/recursion-context | 3.0.0 | BSD-3-Clause | Provides functionality to recursively process PHP variables |
| sebastian/resource-operations | 1.0.0 | BSD-3-Clause | Provides a list of PHP built-in functions that operate on resources |
| sebastian/version | 2.0.1 | BSD-3-Clause | Library that helps with managing the version number of Git-hosted PHP projects |
| squizlabs/php_codesniffer | 3.4.2 | BSD-3-Clause | PHP_CodeSniffer tokenizes PHP, JavaScript and CSS files and detects violations of a defined set of coding standards. |
| symfony/browser-kit | v4.4.7 | MIT | Symfony BrowserKit Component |
| symfony/config | v4.4.7 | MIT | Symfony Config Component |
| symfony/dependency-injection | v4.4.7 | MIT | Symfony DependencyInjection Component |
| symfony/dom-crawler | v4.4.7 | MIT | Symfony DomCrawler Component |
| symfony/http-foundation | v4.4.7 | MIT | Symfony HttpFoundation Component |
| symfony/mime | v4.4.7 | MIT | A library to manipulate MIME messages |
| symfony/options-resolver | v4.4.7 | MIT | Symfony OptionsResolver Component |
| symfony/polyfill-intl-idn | v1.15.0 | MIT | Symfony polyfill for intl’s idn_to_ascii and idn_to_utf8 functions |
| symfony/polyfill-php70 | v1.15.0 | MIT | Symfony polyfill backporting some PHP 7.0+ features to lower PHP versions |
| symfony/polyfill-php72 | v1.15.0 | MIT | Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions |
| symfony/stopwatch | v4.4.7 | MIT | Symfony Stopwatch Component |
| symfony/yaml | v4.4.7 | MIT | Symfony Yaml Component |
| theseer/fdomdocument | 1.6.6 | BSD-3-Clause | The classes contained within this repository extend the standard DOM to use exceptions at all occasions of errors instead of PHP warnings or notices. They also add various custom methods and shortcuts for convenience and to simplify the usage of DOM. |
| theseer/tokenizer | 1.1.3 | BSD-3-Clause | A small library for converting tokenized PHP source code into XML and potentially other formats |
| vlucas/phpdotenv | v2.6.3 | BSD-3-Clause | Loads environment variables from .env to getenv(), $_ENV and $_SERVER automagically. |
| webmozart/assert | 1.7.0 | MIT | Assertions to validate method input/output with nice error messages. |
| weew/helpers-array | v1.3.1 | MIT | Useful collection of php array helpers. |