Packagist.org is ending support for Composer 1.x

The Packagist team has announced that they will be discontinuing support for Composer v1.x on February 25th, 2025. Composer 1.x has been a valuable tool for the PHP community, but with the release of Composer 2.0 in October 2020, it's time to move forward. Over 95% of Composer updates now use v2, which offers improvements in performance, memory usage, and security. Due to architectural issues, managing a package repository with 400,000 packages and over 4.5 million versions has become difficult with Composer 1.x. To focus on enhancing Composer 2.x, the team is shutting down support for Composer 1.x metadata access on Packagist.org. Key dates include February 1st, 2025, when Composer 1.x metadata will become read-only, and August 1st, 2025, when Composer 1.x metadata access will be entirely shut down. Most users will not be affected by this change, as 96% of Composer updates use v2. However, users with legacy apps should check and ensure they are on v2 before the key dates.