Evidence-backed facts
- Packagist documents Composer package search, metadata, providers, versions, distribution, and change feeds. informative
- Public reads are separate from authenticated package submission, ownership, deletion, or Packagist administration. informative
- Clients must bind package or vendor name, search query, result page, metadata fields, provider hash, and cache expectations. informative
- Package metadata and distribution links can change and do not prove publisher identity, code safety, maintenance, license compatibility, or suitability. informative