snippetbashTip

composer audit — Analyze a PHP project's dependencies to detect known security vulnerabilities and list affected pack

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

commandcomposer auditdependenciesdetectanalyzecliphpproject

Problem

How to use the composer audit command: Analyze a PHP project's dependencies to detect known security vulnerabilities and list affected packages. See also: composer. More information: <https://getcomposer.org/doc/03-cli.md#audit>.

Solution

composer audit — Analyze a PHP project's dependencies to detect known security vulnerabilities and list affected packages. See also: composer. More information: <https://getcomposer.org/doc/03-cli.md#audit>.

Check for security vulnerabilities in your current project:

composer audit

Omit dev dependencies in the audit:

composer audit --no-dev

Filter vulnerabilities by output format:

composer audit --format {{table|plain|json|summary}}

Output audit results to a file in JSON format:

composer audit --format json > audit_report.json

Verify whether a specific package in your project is affected by security issues:

composer audit {{vendor}}/{{package}}

Code Snippets

Check for security vulnerabilities in your current project

composer audit

Omit dev dependencies in the audit

composer audit --no-dev

Filter vulnerabilities by output format

composer audit --format {{table|plain|json|summary}}

Output audit results to a file in JSON format

composer audit --format json > audit_report.json

Verify whether a specific package in your project is affected by security issues

composer audit {{vendor}}/{{package}}

Context

tldr-pages: common/composer audit

Revisions (0)

No revisions yet.