Composer is the defacto standard for package management in PHP. It’s simple, effective, and has become ubiquitous in the community. Important Note: Composer major upgrade fix Everybody knows that when using Composer you just create a composer.json file with a list of dependencies and your desired versions, then run composer install and you’re done. You then commit the composer.json to your project
![Composer: It’s All About the Lock File](https://cdn-ak-scissors.b.st-hatena.com/image/square/77fafc44e447d5d864ecaa076e39098d97bbccce/height=288;version=1;width=512/https%3A%2F%2Fwww.engineyard.com%2Fwp-content%2Fuploads%2F2022%2F02%2Fcomposer-lock.webp)