Magento Commerce packages

The Magento application uses Composer to manage PHP packages. The composer.json file declares the list of packages, whereas the composer.lock file stores a complete list of the packages (a full version of each package and its dependencies) used to build a release version of the Magento application. The following tables list packages from the composer.lock file for Magento Commerce 2.3.

Magento packages

This section contains information about the magento dependencies for the latest Magento Commerce 2.3 release. Click the Name links to view the repository and the license agreement.

Required packages

Name Version License Description
magento/composer 1.5.1 OSL-3.0AFL-3.0 Magento composer library helps to instantiate Composer application and run composer commands.
magento/magento-composer-installer 0.1.13 OSL-3.0 Composer installer for Magento modules
magento/zendframework1 1.14.3 BSD-3-Clause Magento Zend Framework 1

Supported packages for development

Name Version License Description
magento/magento-coding-standard 4 OSL-3.0AFL-3.0 A set of Magento specific PHP CodeSniffer rules.
magento/magento2-functional-testing-framework 2.5.3 AGPL-3.0 Magento2 Functional Testing Framework

Third party packages

This section contains information about third party packages for the latest Magento Commerce 2.3 release. Click the Name links to view the repository and the license agreement.

Required packages

Name Version License Description
braintree/braintree_php 3.35.0 MIT Braintree PHP Client Library
colinmollenhour/cache-backend-file v1.4.5 BSD-3-Clause The stock Zend_Cache_Backend_File backend has extremely poor performance for cleaning by tags making it become unusable as the number of cached items increases. This backend makes many changes resulting in a huge performance boost, especially for tag cleaning.
colinmollenhour/cache-backend-redis 1.10.6 BSD-3-Clause Zend_Cache backend using Redis with full support for tags.
colinmollenhour/credis 1.10.0 MIT Credis is a lightweight interface to the Redis key-value store which wraps the phpredis library when available for better performance.
colinmollenhour/php-redis-session-abstract v1.4.2 BSD-3-Clause A Redis-based session handler with optimistic locking
composer/ca-bundle 1.2.5 MIT Lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle.
composer/composer 1.9.1 MIT Composer helps you declare, manage and install dependencies of PHP projects. It ensures you have the right stack everywhere.
composer/semver 1.5.0 MIT Semver library that offers utilities, version constraint parsing and validation.
composer/spdx-licenses 1.5.2 MIT SPDX licenses list and validation library.
composer/xdebug-handler 1.4.0 MIT Restarts a process without Xdebug.
container-interop/container-interop 1.2.0 MIT Promoting the interoperability of container objects (DIC, SL, etc.)
elasticsearch/elasticsearch v6.7.2 Apache-2.0 PHP Client for Elasticsearch
guzzlehttp/guzzle 6.5.2 MIT Guzzle is a PHP HTTP client library
guzzlehttp/promises v1.3.1 MIT Guzzle promises library
guzzlehttp/psr7 1.6.1 MIT PSR-7 message implementation that also provides common utility methods
guzzlehttp/ringphp 1.1.1 MIT Provides a simple API and specification that abstracts away the details of HTTP into a single PHP function.
guzzlehttp/streams 3.0.0 MIT Provides a simple abstraction over streams of data
justinrainbow/json-schema 5.2.9 MIT A library to validate a json schema.
monolog/monolog 1.25.3 MIT Sends your logs to files, sockets, inboxes, databases and various web services
paragonie/random_compat v9.99.99 MIT PHP 5.x polyfill for random_bytes() and random_int() from PHP 7
paragonie/sodium_compat v1.12.2 ISC Pure PHP implementation of libsodium; uses the PHP extension if it exists
pelago/emogrifier v2.2.0 MIT Converts CSS styles into inline style attributes in your HTML code
php-amqplib/php-amqplib v2.10.1 LGPL-2.1-or-later Formerly videlalvaro/php-amqplib. This library is a pure PHP implementation of the AMQP protocol. It’s been tested against RabbitMQ.
phpseclib/mcrypt_compat 1.0.8 MIT PHP 7.1 polyfill for the mcrypt extension from PHP <= 7.0
phpseclib/phpseclib 2.0.23 MIT PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.
psr/container 1.0.0 MIT Common Container Interface (PHP FIG PSR-11)
psr/http-message 1.0.1 MIT Common interface for HTTP messages
psr/log 1.1.2 MIT Common interface for logging libraries
ralouphie/getallheaders 3.0.3 MIT A polyfill for getallheaders.
ramsey/uuid 3.8.0 MIT Formerly rhumsaa/uuid. A PHP 5.4+ library for generating RFC 4122 version 1, 3, 4, and 5 universally unique identifiers (UUID).
react/promise v2.7.1 MIT A lightweight implementation of CommonJS Promises/A for PHP
seld/jsonlint 1.7.2 MIT JSON Linter
seld/phar-utils 1.0.1 MIT PHAR file format utilities, for when PHP phars you up
symfony/console v4.3.9 MIT Symfony Console Component
symfony/css-selector v4.4.2 MIT Symfony CssSelector Component
symfony/event-dispatcher v4.3.9 MIT Symfony EventDispatcher Component
symfony/event-dispatcher-contracts v1.1.7 MIT Generic abstractions related to dispatching event
symfony/filesystem v4.4.2 MIT Symfony Filesystem Component
symfony/finder v4.4.2 MIT Symfony Finder Component
symfony/polyfill-ctype v1.13.1 MIT Symfony polyfill for ctype functions
symfony/polyfill-mbstring v1.13.1 MIT Symfony polyfill for the Mbstring extension
symfony/polyfill-php73 v1.13.1 MIT Symfony polyfill backporting some PHP 7.3+ features to lower PHP versions
symfony/process v4.3.9 MIT Symfony Process Component
symfony/service-contracts v1.1.8 MIT Generic abstractions related to writing services
tedivm/jshrink v1.3.3 BSD-3-Clause Javascript Minifier built in PHP
true/punycode v2.1.1 MIT A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)
tubalmartin/cssmin v4.1.1 BSD-3-Clause A PHP port of the YUI CSS compressor
webonyx/graphql-php v0.13.8 MIT A PHP port of GraphQL reference implementation
wikimedia/less.php 1.8.2 Apache-2.0 PHP port of the Javascript version of LESS http://lesscss.org (Originally maintained by Josh Schmidt)
zendframework/zend-captcha 2.9.0 BSD-3-Clause Generate and validate CAPTCHAs using Figlets, images, ReCaptcha, and more
zendframework/zend-code 3.3.2 BSD-3-Clause Extensions to the PHP Reflection API, static code scanning, and code generation
zendframework/zend-config 2.6.0 BSD-3-Clause provides a nested object property based user interface for accessing this configuration data within application code
zendframework/zend-console 2.8.0 BSD-3-Clause Build console applications using getopt syntax or routing, complete with prompts
zendframework/zend-crypt 2.6.0 BSD-3-Clause  
zendframework/zend-db 2.11.0 BSD-3-Clause Database abstraction layer, SQL abstraction, result set abstraction, and RowDataGateway and TableDataGateway implementations
zendframework/zend-di 2.6.1 BSD-3-Clause  
zendframework/zend-diactoros 1.8.7 BSD-2-Clause PSR HTTP Message implementations
zendframework/zend-escaper 2.6.1 BSD-3-Clause Securely and safely escape HTML, HTML attributes, JavaScript, CSS, and URLs
zendframework/zend-eventmanager 3.2.1 BSD-3-Clause Trigger and listen to events within a PHP application
zendframework/zend-feed 2.12.0 BSD-3-Clause provides functionality for consuming RSS and Atom feeds
zendframework/zend-filter 2.9.2 BSD-3-Clause Programmatically filter and normalize data and files
zendframework/zend-form 2.14.3 BSD-3-Clause Validate and display simple and complex forms, casting forms to business objects and vice versa
zendframework/zend-http 2.11.2 BSD-3-Clause Provides an easy interface for performing Hyper-Text Transfer Protocol (HTTP) requests
zendframework/zend-hydrator 2.4.2 BSD-3-Clause Serialize objects to arrays, and vice versa
zendframework/zend-i18n 2.10.1 BSD-3-Clause Provide translations for your application, and filter and validate internationalized values
zendframework/zend-inputfilter 2.10.1 BSD-3-Clause Normalize and validate input sets from the web, APIs, the CLI, and more, including files
zendframework/zend-json 2.6.1 BSD-3-Clause provides convenience methods for serializing native PHP to JSON and decoding JSON to native PHP
zendframework/zend-loader 2.6.1 BSD-3-Clause Autoloading and plugin loading strategies
zendframework/zend-log 2.12.0 BSD-3-Clause Robust, composite logger with filtering, formatting, and PSR-3 support
zendframework/zend-mail 2.10.0 BSD-3-Clause Provides generalized functionality to compose and send both text and MIME-compliant multipart e-mail messages
zendframework/zend-math 2.7.1 BSD-3-Clause  
zendframework/zend-mime 2.7.2 BSD-3-Clause Create and parse MIME messages and parts
zendframework/zend-modulemanager 2.8.4 BSD-3-Clause Modular application system for zend-mvc applications
zendframework/zend-mvc 2.7.15 BSD-3-Clause  
zendframework/zend-psr7bridge 0.2.2 BSD-3-Clause PSR-7 <-> Zend\Http bridge
zendframework/zend-serializer 2.9.1 BSD-3-Clause Serialize and deserialize PHP structures to a variety of representations
zendframework/zend-server 2.8.1 BSD-3-Clause Create Reflection-based RPC servers
zendframework/zend-servicemanager 2.7.11 BSD-3-Clause  
zendframework/zend-session 2.9.1 BSD-3-Clause Object-oriented interface to PHP sessions and storage
zendframework/zend-soap 2.8.0 BSD-3-Clause  
zendframework/zend-stdlib 3.2.1 BSD-3-Clause SPL extensions, array utilities, error handlers, and more
zendframework/zend-text 2.7.1 BSD-3-Clause Create FIGlets and text-based tables
zendframework/zend-uri 2.7.1 BSD-3-Clause A component that aids in manipulating and validating » Uniform Resource Identifiers (URIs)
zendframework/zend-validator 2.13.0 BSD-3-Clause Validation classes for a wide range of domains, and the ability to chain validators to create complex validation criteria
zendframework/zend-view 2.11.4 BSD-3-Clause Flexible view layer supporting and providing multiple view layers, helpers, and more

Supported packages for development

Name Version License Description
allure-framework/allure-codeception 1.3.0 Apache-2.0 A Codeception adapter for Allure report.
allure-framework/allure-php-api 1.1.5 Apache-2.0 PHP API for Allure adapter
allure-framework/allure-phpunit 1.2.3 Apache-2.0 A PHPUnit adapter for Allure report.
behat/gherkin v4.6.0 MIT Gherkin DSL parser for PHP 5.3
cache/cache 0.4.0 MIT Library of all the php-cache adapters
codeception/codeception 2.4.5 MIT BDD-style testing framework
codeception/phpunit-wrapper 6.8.0 MIT PHPUnit classes used by Codeception
codeception/stub 2.1.0 MIT Flexible Stub wrapper for PHPUnit’s Mock Builder
consolidation/annotated-command 2.12.0 MIT Initialize Symfony Console commands from annotated command class methods.
consolidation/config 1.2.1 MIT Provide configuration services for a commandline tool.
consolidation/log 1.1.1 MIT Improved Psr-3 / Psr\Log logger based on Symfony Console components.
consolidation/output-formatters 3.5.0 MIT Format text by applying transformations provided by plug-in formatters.
consolidation/robo 1.4.11 MIT Modern task runner
consolidation/self-update 1.1.5 MIT Provides a self:update command for Symfony Console applications.
csharpru/vault-php 3.5.3 MIT Best Vault client for PHP that you can find
csharpru/vault-php-guzzle6-transport 2.0.4 MIT Guzzle6 transport for Vault PHP client
dealerdirect/phpcodesniffer-composer-installer v0.5.0 MIT PHP_CodeSniffer Standards Composer Installer Plugin
dflydev/dot-access-data v1.1.0 MIT Given a deep data structure, access data by dot notation.
doctrine/annotations v1.8.0 MIT Docblock Annotations Parser
doctrine/cache 1.10.0 MIT PHP Doctrine Cache library is a popular cache implementation that supports many different drivers such as redis, memcache, apc, mongodb and others.
doctrine/inflector v1.1.0 MIT Common String Manipulations with regard to casing and singular/plural rules.
doctrine/instantiator 1.3.0 MIT A small, lightweight utility to instantiate objects in PHP without invoking their constructors
doctrine/lexer 1.2.0 MIT PHP Doctrine Lexer parser library that can be used in Top-Down, Recursive Descent Parsers.
facebook/webdriver 1.7.1 Apache-2.0 A PHP client for Selenium WebDriver
flow/jsonpath 0.5.0 MIT JSONPath implementation for parsing, searching and flattening arrays
friendsofphp/php-cs-fixer v2.14.6 MIT A tool to automatically fix PHP code style
fzaninotto/faker v1.9.1 MIT Faker is a PHP library that generates fake data for you.
grasmash/expander 1.0.0 MIT Expands internal property references in PHP arrays file.
grasmash/yaml-expander 1.4.0 MIT Expands internal property references in a yaml file.
ircmaxell/password-compat v1.0.4 MIT A compatibility library for the proposed simplified password hashing algorithm: https://wiki.php.net/rfc/password_hash
jms/metadata 1.7.0 MIT Class/method/property metadata management in PHP
jms/parser-lib 1.0.0 Apache2 A library for easily creating recursive-descent parsers.
jms/serializer 0.16.0 Apache2 Library for (de-)serializing data of any complexity; supports XML, JSON, and YAML.
league/container 2.4.1 MIT A fast and intuitive dependency injection container.
league/flysystem 1.0.63 MIT Filesystem abstraction: Many filesystems, one API.
lusitanian/oauth v0.8.11 MIT PHP 5.3+ oAuth 1/2 Library
mikey179/vfsstream v1.6.8 BSD-3-Clause Virtual file system to mock the real file system in unit tests.
mustache/mustache v2.13.0 MIT A Mustache implementation in PHP.
myclabs/deep-copy 1.9.4 MIT Create deep copies (clones) of your objects
pdepend/pdepend 2.5.2 BSD-3-Clause Official version of pdepend to be handled with Composer
phar-io/manifest 1.0.1 BSD-3-Clause Component for reading phar.io manifest information from a PHP Archive (PHAR)
phar-io/version 1.0.1 BSD-3-Clause Library for handling version information and constraints
php-cs-fixer/diff v1.3.0 BSD-3-Clause sebastian/diff v2 backport support for PHP5.6
phpcollection/phpcollection 0.5.0 Apache2 General-Purpose Collection Library for PHP
phpcompatibility/php-compatibility 9.3.5 LGPL-3.0-or-later A set of sniffs for PHP_CodeSniffer that checks for PHP cross-version compatibility.
phpdocumentor/reflection-common 2.0.0 MIT Common reflection classes used by phpdocumentor to reflect the code structure
phpdocumentor/reflection-docblock 4.3.4 MIT With this component, a library can provide support for annotations via DocBlocks or otherwise retrieve information that is embedded in a DocBlock.
phpdocumentor/type-resolver 1.0.1 MIT A PSR-5 based resolver of Class names, Types and Structural Element Names
phpmd/phpmd 2.7.0 BSD-3-Clause PHPMD is a spin-off project of PHP Depend and aims to be a PHP equivalent of the well known Java tool PMD.
phpoption/phpoption 1.7.2 Apache-2.0 Option Type for PHP
phpspec/prophecy 1.10.1 MIT Highly opinionated mocking framework for PHP 5.3+
phpunit/php-code-coverage 5.3.2 BSD-3-Clause Library that provides collection, processing, and rendering functionality for PHP code coverage information.
phpunit/php-file-iterator 1.4.5 BSD-3-Clause FilterIterator implementation that filters files based on a list of suffixes.
phpunit/php-text-template 1.2.1 BSD-3-Clause Simple template engine.
phpunit/php-timer 1.0.9 BSD-3-Clause Utility class for timing
phpunit/php-token-stream 2.0.2 BSD-3-Clause Wrapper around PHP’s tokenizer extension.
phpunit/phpunit 6.5.14 BSD-3-Clause The PHP Unit Testing framework.
phpunit/phpunit-mock-objects 5.0.10 BSD-3-Clause Mock Object library for PHPUnit
psr/cache 1.0.1 MIT Common interface for caching libraries
psr/simple-cache 1.0.1 MIT Common interfaces for simple caching
sebastian/code-unit-reverse-lookup 1.0.1 BSD-3-Clause Looks up which function or method a line of code belongs to
sebastian/comparator 2.1.3 BSD-3-Clause Provides the functionality to compare PHP values for equality
sebastian/diff 2.0.1 BSD-3-Clause Diff implementation
sebastian/environment 3.1.0 BSD-3-Clause Provides functionality to handle HHVM/PHP environments
sebastian/exporter 3.1.2 BSD-3-Clause Provides the functionality to export PHP variables for visualization
sebastian/finder-facade 1.2.2 BSD-3-Clause FinderFacade is a convenience wrapper for Symfony’s Finder component.
sebastian/global-state 2.0.0 BSD-3-Clause Snapshotting of global state
sebastian/object-enumerator 3.0.3 BSD-3-Clause Traverses array structures and object graphs to enumerate all referenced objects
sebastian/object-reflector 1.1.1 BSD-3-Clause Allows reflection of object attributes, including inherited and non-public ones
sebastian/phpcpd 3.0.1 BSD-3-Clause Copy/Paste Detector (CPD) for PHP code.
sebastian/recursion-context 3.0.0 BSD-3-Clause Provides functionality to recursively process PHP variables
sebastian/resource-operations 1.0.0 BSD-3-Clause Provides a list of PHP built-in functions that operate on resources
sebastian/version 2.0.1 BSD-3-Clause Library that helps with managing the version number of Git-hosted PHP projects
squizlabs/php_codesniffer 3.4.2 BSD-3-Clause PHP_CodeSniffer tokenizes PHP, JavaScript and CSS files and detects violations of a defined set of coding standards.
symfony/browser-kit v4.4.2 MIT Symfony BrowserKit Component
symfony/config v4.4.2 MIT Symfony Config Component
symfony/dependency-injection v4.4.2 MIT Symfony DependencyInjection Component
symfony/dom-crawler v4.4.2 MIT Symfony DomCrawler Component
symfony/http-foundation v2.8.52 MIT Symfony HttpFoundation Component
symfony/options-resolver v4.4.2 MIT Symfony OptionsResolver Component
symfony/polyfill-php54 v1.13.1 MIT Symfony polyfill backporting some PHP 5.4+ features to lower PHP versions
symfony/polyfill-php55 v1.13.1 MIT Symfony polyfill backporting some PHP 5.5+ features to lower PHP versions
symfony/polyfill-php70 v1.13.1 MIT Symfony polyfill backporting some PHP 7.0+ features to lower PHP versions
symfony/polyfill-php72 v1.13.1 MIT Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
symfony/stopwatch v4.4.2 MIT Symfony Stopwatch Component
symfony/yaml v4.4.2 MIT Symfony Yaml Component
theseer/fdomdocument 1.6.6 BSD-3-Clause The classes contained within this repository extend the standard DOM to use exceptions at all occasions of errors instead of PHP warnings or notices. They also add various custom methods and shortcuts for convenience and to simplify the usage of DOM.
theseer/tokenizer 1.1.3 BSD-3-Clause A small library for converting tokenized PHP source code into XML and potentially other formats
vlucas/phpdotenv v2.6.1 BSD-3-Clause Loads environment variables from .env to getenv(), $_ENV and $_SERVER automagically.
webmozart/assert 1.6.0 MIT Assertions to validate method input/output with nice error messages.
weew/helpers-array v1.3.1 MIT Useful collection of php array helpers.