Composer configurations and its community


Technology is governed by physical laws, which consists of protocols  and configurations. In the previous tutorial, we discussed extensively on the concepts of the composer repository and how they work, in this tutorial we will take a deep look at an important section of the composer.json file, called the “config” section.

Config is synonymous to configuration; the name “config” gives us an overall idea of what this section does. This section can be regarded as the power house of composer as we can reconfigure all the default behavior of composer here.

“config-name”: ”config-value”,

The above code snippet shows the config section for a composer.json file. We will now take a deeper look at its contents.

#process-timeout: This by default is 300seconds. It is the time interval process like git clone can run before composer assumes that the links are dead. This can be extended, if your connection is poor, or if the package you are downloading is large.

#use-include-path: This also by default is false, but when enabled, that is set to “true”, it compels the composer to look for the classes in the path and include them.

#preferred-install: It defaults to “auto” and can be of source, dist or auto. This option basically allows you to set the install method Composer will prefer to use. It can optionally be a hash of patterns for more granular install preferences.

#store-auths: This option determines what action composer should take after authentication. It could be set to “true”, “false” or “prompt”.

#github-protocols: This is a list of protocols to use when cloning a package from github.com. The defaults protocols used are “https”, “ssh”,”git”. The git protocol is present if secure-http is disabled. You can set any of these protocols to be the default protocol used by composer to either pull or push to github.

#github-oauth : This is a list of domains and the corresponding “oauthtoken”  to be used in accessing these domains. This is essential when accessing private repos on github. When accessing private repos on gitlab, we use gitlab-oauth and gitlab-token instead.

#disable-tls: By default, this is false. When set to true, all HTTPS URLs will be accessed as HTTP and all the network level encryption will be disabled. Enabling this is highly discouraged, as it possesses a lot of security risks. An alternative to enabling this is to enable the php_openssl extension in php.ini.

#secure-http: Defaults to true and it ensures that only HTTPS URLs can be downloaded via composer. In a situation where access to http is seriously needed, this can be disabled.

#cafile: This points to the location where the Certificate Authority File can be found on the system. PHP 5.6 and above detects this automatically.

#capath: In a scenario where cafile is not specified, or the certificate not found, the directory assigned to the capath is searched for a suitable certificate. The capath must be a properly hashed certificate directory.

#platform: This allows you fake platform packages (PHP and extensions) so that one  can emulate a production env or define a target platform in the config.

#vendor-dir: The default directory for saving packages is the vendor directory. We  can install dependencies into a different directory if you want to. Just by setting the vendor-dir parameters.

#bin-dir: This is defaulted to vendor/bin, all projects with binaries are symlinked into this directory.

#data-dir: This directory stores old and past composer.phar files to be able to rollback to older versions. The default directory for windows is “C:\Users\<user>\AppData\Roaming\Composer” and  “$XDG_DATA_HOME/composer” for Unix systems that follow the XDG Base Directory Specifications, and “$home” on other Unix systems.

#cache-dir: On windows his defaults to  “C:\Users\<user>\AppData\Local\Composer” and “ $XDG_CACHE_HOME/composer” on Unix systems that follow the XDG Base Directory Specifications, and “$home/cache” on other Unix systems. Stores all the caches used by Composer.

#notify-on-install: This allows composer to send notification to a URL whenever a package is installed. This by default is true.

#discard-changes: This has three options. “true”, false” and “stash”. It allows us to set the default style for handling dirty updates in non-interactive mode. ”true” ,will always discard changes in vendors, while “stash”  will try to stash and reapply, and “false” will just apply the changes.

#archive-format: This specifies the archiving format to be used by composer. By default, it uses “tar” for archiving files.

#htaccess-protect: This is used to limit composer on the directories at which htaccess files will be created. It could be set to either true or false. When seted to false composer will not create  “htaccess” files in the composer home, cache, and data directories.

The Composer Community:

Composer is an open source project where everyone is free to contribute to the development of composer. The only strict rule to follow when contributing to composer is that all your code must follow the PSR-2 coding standard.

In this tutorial, we have discussed extensively on composer configurations and its community. I hope you this will encourage you to help contribute to the development of composer.

Don’t forget to share this tutorial with your friends, like and comment in the comment section. See you in the very next tutorial.

Previous: Composer command line interface and commands (Part 6)
Next: A gentle introduction to composer as a dependency manager

PHP: Tips of the Day

How do you parse and process HTML/XML in PHP?

Native XML Extensions

I prefer using one of the native XML extensions since they come bundled with PHP, are usually faster than all the 3rd party libs and give me all the control I need over the markup.


The DOM extension allows you to operate on XML documents through the DOM API with PHP 5. It is an implementation of the W3C's Document Object Model Core Level 3, a platform- and language-neutral interface that allows programs and scripts to dynamically access and update the content, structure and style of documents.

DOM is capable of parsing and modifying real world (broken) HTML and it can do XPath queries. It is based on libxml.

It takes some time to get productive with DOM, but that time is well worth it IMO. Since DOM is a language-agnostic interface, you'll find implementations in many languages, so if you need to change your programming language, chances are you will already know how to use that language's DOM API then.

A basic usage example can be found in Grabbing the href attribute of an A element and a general conceptual overview can be found at DOMDocument in php

How to use the DOM extension has been covered extensively on StackOverflow, so if you choose to use it, you can be sure most of the issues you run into can be solved by searching/browsing Stack Overflow.


The XMLReader extension is an XML pull parser. The reader acts as a cursor going forward on the document stream and stopping at each node on the way.

XMLReader, like DOM, is based on libxml. I am not aware of how to trigger the HTML Parser Module, so chances are using XMLReader for parsing broken HTML might be less robust than using DOM where you can explicitly tell it to use libxml's HTML Parser Module.

A basic usage example can be found at getting all values from h1 tags using php

XML Parser

This extension lets you create XML parsers and then define handlers for different XML events. Each XML parser also has a few parameters you can adjust.

The XML Parser library is also based on libxml, and implements a SAX style XML push parser. It may be a better choice for memory management than DOM or SimpleXML, but will be more difficult to work with than the pull parser implemented by XMLReader.


The SimpleXML extension provides a very simple and easily usable toolset to convert XML to an object that can be processed with normal property selectors and array iterators.

SimpleXML is an option when you know the HTML is valid XHTML. If you need to parse broken HTML, don't even consider SimpleXml because it will choke.

A basic usage example can be found at A simple program to CRUD node and node values of xml file and there is lots of additional examples in the PHP Manual.

3rd Party Libraries (libxml based)

If you prefer to use a 3rd-party lib, I'd suggest using a lib that actually uses DOM/libxml underneath instead of string parsing.

FluentDom Repo

FluentDOM provides a jQuery-like fluent XML interface for the DOMDocument in PHP. Selectors are written in XPath or CSS (using a CSS to XPath converter). Current versions extend the DOM implementing standard interfaces and add features from the DOM Living Standard. FluentDOM can load formats like JSON, CSV, JsonML, RabbitFish and others. Can be installed via Composer.


Wa72\HtmlPageDom` is a PHP library for easy manipulation of HTML documents using It requires DomCrawler from Symfony2 components for traversing the DOM tree and extends it by adding methods for manipulating the DOM tree of HTML documents.

phpQuery (not updated for years)

phpQuery is a server-side, chainable, CSS3 selector driven Document Object Model (DOM) API based on jQuery JavaScript Library written in PHP5 and provides additional Command Line Interface (CLI).


Zend_Dom provides tools for working with DOM documents and structures. Currently, we offer Zend_Dom_Query, which provides a unified interface for querying DOM documents utilizing both XPath and CSS selectors.


QueryPath is a PHP library for manipulating XML and HTML. It is designed to work not only with local files, but also with web services and database resources. It implements much of the jQuery interface (including CSS-style selectors), but it is heavily tuned for server-side use. Can be installed via Composer.


fDOMDocument extends the standard DOM to use exceptions at all occasions of errors instead of PHP warnings or notices. They also add various custom methods and shortcuts for convenience and to simplify the usage of DOM.


sabre/xml is a library that wraps and extends the XMLReader and XMLWriter classes to create a simple "xml to object/array" mapping system and design pattern. Writing and reading XML is single-pass and can therefore be fast and require low memory on large xml files.


FluidXML is a PHP library for manipulating XML with a concise and fluent API. It leverages XPath and the fluent programming pattern to be fun and effective.

3rd-Party (not libxml-based)

The benefit of building upon DOM/libxml is that you get good performance out of the box because you are based on a native extension. However, not all 3rd-party libs go down this route. Some of them listed below

PHP Simple HTML DOM Parser

  • An HTML DOM parser written in PHP5+ lets you manipulate HTML in a very easy way!
  • Require PHP 5+.
  • Supports invalid HTML.
  • Find tags on an HTML page with selectors just like jQuery.
  • Extract contents from HTML in a single line.

I generally do not recommend this parser. The codebase is horrible and the parser itself is rather slow and memory hungry. Not all jQuery Selectors (such as child selectors) are possible. Any of the libxml based libraries should outperform this easily.

PHP Html Parser

PHPHtmlParser is a simple, flexible, html parser which allows you to select tags using any css selector, like jQuery. The goal is to assiste in the development of tools which require a quick, easy way to scrap html, whether it's valid or not! This project was original supported by sunra/php-simple-html-dom-parser but the support seems to have stopped so this project is my adaptation of his previous work.

Again, I would not recommend this parser. It is rather slow with high CPU usage. There is also no function to clear memory of created DOM objects. These problems scale particularly with nested loops. The documentation itself is inaccurate and misspelled, with no responses to fixes since 14 Apr 16.


  • A universal tokenizer and HTML/XML/RSS DOM Parser
    • Ability to manipulate elements and their attributes
    • Supports invalid HTML and UTF8
  • Can perform advanced CSS3-like queries on elements (like jQuery -- namespaces supported)
  • A HTML beautifier (like HTML Tidy)
    • Minify CSS and Javascript
    • Sort attributes, change character case, correct indentation, etc.
  • Extensible
    • Parsing documents using callbacks based on current character/token
    • Operations separated in smaller functions for easy overriding
  • Fast and Easy

Never used it. Can't tell if it's any good.


You can use the above for parsing HTML5, but there can be quirks due to the markup HTML5 allows. So for HTML5 you want to consider using a dedicated parser, like


A Python and PHP implementations of a HTML parser based on the WHATWG HTML5 specification for maximum compatibility with major desktop web browsers.

We might see more dedicated parsers once HTML5 is finalized. There is also a blogpost by the W3's titled How-To for html 5 parsing that is worth checking out.


If you don't feel like programming PHP, you can also use Web services. In general, I found very little utility for these, but that's just me and my use cases.


ScraperWiki's external interface allows you to extract data in the form you want for use on the web or in your own applications. You can also extract information about the state of any scraper.

Regular Expressions

Last and least recommended, you can extract data from HTML with regular expressions. In general using Regular Expressions on HTML is discouraged.

Most of the snippets you will find on the web to match markup are brittle. In most cases they are only working for a very particular piece of HTML. Tiny markup changes, like adding whitespace somewhere, or adding, or changing attributes in a tag, can make the RegEx fails when it's not properly written. You should know what you are doing before using RegEx on HTML.

HTML parsers already know the syntactical rules of HTML. Regular expressions have to be taught for each new RegEx you write. RegEx are fine in some cases, but it really depends on your use-case.

You can write more reliable parsers, but writing a complete and reliable custom parser with regular expressions is a waste of time when the aforementioned libraries already exist and do a much better job on this.

Ref : https://bit.ly/2VdyKBy